CVE-2026-58599

Summary

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

Affected Software

VendorProductVersion RangeStatus
MicrosoftHEVC Video Extensions1.0.0 < 2.4.87.0affected
MicrosoftHEVC Video Extensions for Licensed Applications2.0.0.0 < 2.4.85.0affected
MicrosoftHEVC Video Extensions from Device Manufacturer2.0.0.0 < 2.4.86.0affected

Weaknesses

  • CWE-122: CWE-122: Heap-based Buffer Overflow

References