CVE-2019-11471

Опубликовано: 23 апр. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images.

Ссылки

https://github.com/strukturag/libheif/commit/995a4283d8ed2d0d2c1ceb1a577b993df2f0e014
Patch
Third Party Advisory
https://github.com/strukturag/libheif/issues/123
Exploit
Patch
Third Party Advisory
https://github.com/strukturag/libheif/commit/995a4283d8ed2d0d2c1ceb1a577b993df2f0e014
Patch
Third Party Advisory
https://github.com/strukturag/libheif/issues/123
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:struktur:libheif:1.4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00291

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2019-11471

CVSS3: 8.8

ubuntu

больше 6 лет назад

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images.

CVE-2019-11471

CVSS3: 8.8

debian

больше 6 лет назад

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_al ...

GHSA-25gq-3qmx-682c

CVSS3: 8.8

github

около 3 лет назад

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images.

EPSS

Процентиль: 52%

0.00291

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416