Technical Information

Brief overview of the risk:

A Remote Code Execution vulnerability in HEVC video extension. An attacker can exploit this vulnerability by tricking the victim to open a specially crafted file which could lead to a crash. An attacker who successfully exploited the vulnerability could execute arbitrary code on the host machine in the context of the logged on user.

Further information on this vulnerability is available at : CVE-2022-22006