CVE-2023-38170
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
The vulnerability in HEVC Video Extensions allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
Risk Assessment
This threat could lead to unauthorized access to systems and data breaches. Organizations should be aware of potential attacks leveraging this vulnerability.
Recommendation
It is recommended to update HEVC Video Extensions to the latest version to mitigate the risks associated with this vulnerability. Regular monitoring and applying security patches is crucial.
Other vulnerabilities in HEVC Video Extensions
See all- CVE-2021-26902High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this vulnerability to execute arbitrary code on the system.
- CVE-2021-38661High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33778High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33777High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33776High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33775High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-31947High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to execute code on the victim's system.
- CVE-2021-27062High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run code on the affected system.
- CVE-2021-27061High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run arbitrary code in the context of the logged-in user.
- CVE-2021-27051High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run code on the affected system.
Original NVD description (English source)
HEVC Video Extensions Remote Code Execution Vulnerability