Wordfence Argus Discovers Critical Vulnerability in libheif, the Library That Opens iPhone Photos on Your Server
Critique · Wordfence ·
WordPress · Exploité
Ce qui s'est passé
Wordfence found a CVSS 9.8 flaw in libheif, used by servers to process HEIC/iPhone images; demonstrated protected-file disclosure and code execution on a WordPress deployment. No CVE listed.
À faire maintenant
Inventory libheif/HEIC processing. Disable or block HEIC uploads/conversion until patched. Apply vendor/OS updates; verify with vendor advisory. Restrict exposed apps, add WAF rules, and monitor for exploitation.
Source originale
Analyse assistée par IA, sources citées. Vérifiez auprès de l'avis du fournisseur avant d'agir.