CVE-2022-22018
HighCVSS 7.8Exploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
HEVC Video Extensions contains a remote code execution vulnerability.
Risk Assessment
Opening a specially crafted video file could allow an attacker to execute arbitrary code in the user's context.
Recommendation
Update HEVC Video Extensions to the latest version and avoid opening untrusted video files.
Other vulnerabilities in HEVC Video Extensions
See all- CVE-2021-26902High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this vulnerability to execute arbitrary code on the system.
- CVE-2023-38170High
The vulnerability in HEVC Video Extensions allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-29119High
Remote Code Execution vulnerability in Microsoft HEVC Video Extensions. The NVD description does not provide technical details of the vulnerability mechanism.
- CVE-2021-38661High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33778High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33777High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33776High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33775High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-31947High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to execute code on the victim's system.
- CVE-2021-27062High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run code on the affected system.
Original NVD description (English source)
HEVC Video Extensions Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS