← Back to events
ActiveTech

Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers

Photo: Vercel Blog

What happened

How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.

Summary assembled by rule from the sources below

Why it's spreading

Sources