Critical libheif Flaw Lets Attackers Hijack Servers via iPhone Photos
Wordfence Argus researchers uncovered a critical, CVSS 9.8 vulnerability in libheif, a widely used library for processing HEIC images from iPhones, and demonstrated real code execution on a WordPress deployment.