5 ms·

For Windows 10, instead of getting the $1 HEVC / HEIF one from the Microsoft Store, opt for the free version for OEM's (named "HEVC Video Extensions from Device

For Windows 10, instead of getting the $1 HEVC / HEIF one from the Microsoft Store, opt for the free version for OEM's (named "HEVC Video Extensions from Device Manufacturer") instructions at https://www.howtogeek.com/680690/how-to-install-free-hevc-codecs-on-windows-10-for-h.265-video/ https://www.howtogeek.com/680690/how-to-install-free-hevc-co...

orev 4y ago
There have been multiple remote code execution vulnerabilities in the codec since that was last updated, and MS clearly does not plan to patch it. It’s a very bad idea to install this.
- DaiPlusPlus 4y ago
  Citation/link?
  - deleted 4y ago
    [deleted]
- jsmith45 4y ago
  I'd certainly like more details. The latest CVE number that i can find for such flaws looks to be CVE-2022-30188, which Microsoft claims is patched: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30188 https://msrc.microsoft.com/update-guide/vulnerability/CVE-20... But I will say that there is a disturbing number of such vulnerabilities listed for this codec.
  - orev 4y ago
    The last time I checked this, there were a few open CVEs that had been patched in the paid version, but the free one was not updated. It looks like the version numbers are similar now, so maybe my caveat no longer applies.