Reply to post: HEVC "data" files contain executable code?

Microsoft patches critical remote-code-exec hole in Exchange Server and others

John Brown (no body) Silver badge
Facepalm

HEVC "data" files contain executable code?

Surely this is yet again a case of lessons NOT being learned. Malicious JPeG image files anyone?

Why does *any* data file need to contain *any* executable code? I mean files which any normal person would expect to be data, not complex script operated spreadsheets etc. That's a separate can of worms.

Does an HEVC encoder or decoder include some sort of scripting interpreter or VM and has access to the underlying OS? After all, the same HEVC file is expected to play on Windows, Linux, Apple, Android etc.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2022