Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-43967

Опубликовано: 21 апр. 2025
Источник: debian
EPSS Низкий

Описание

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libheiffixed1.19.7-1package
libheifnot-affectedbookwormpackage
libheifnot-affectedbullseyepackage

Примечания

  • https://github.com/strukturag/libheif/issues/1455

  • Introduced by: https://github.com/strukturag/libheif/commit/e18ac586ca9e16429b0db1814e433d032a655b6e (v1.19.0)

  • Fixed by: https://github.com/strukturag/libheif/commit/6e35af7b0ff9fb6cc952a1539590d160db32f671 (v1.19.6)

EPSS

Процентиль: 15%
0.00049
Низкий

Связанные уязвимости

CVSS3: 2.9
ubuntu
2 месяца назад

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item.

CVSS3: 2.9
nvd
2 месяца назад

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item.

CVSS3: 2.9
github
2 месяца назад

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item.

EPSS

Процентиль: 15%
0.00049
Низкий