CVE-2021-38661
HighCVSS 7.8Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
Risk Assessment
Risk of system compromise when a user opens a malicious video file.
Recommendation
Install the latest security update for HEVC Video Extensions.
Other vulnerabilities in HEVC Video Extensions
See all- CVE-2021-26902High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this vulnerability to execute arbitrary code on the system.
- CVE-2023-38170High
The vulnerability in HEVC Video Extensions allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-29119High
Remote Code Execution vulnerability in Microsoft HEVC Video Extensions. The NVD description does not provide technical details of the vulnerability mechanism.
- CVE-2022-22018High
HEVC Video Extensions contains a remote code execution vulnerability.
- CVE-2021-33778High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33777High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33776High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33775High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-31947High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to execute code on the victim's system.
- CVE-2021-27062High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run code on the affected system.
Original NVD description (English source)
HEVC Video Extensions Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

