CVE-2024-41311

Опубликовано: 15 окт. 2024

Источник: nvd

CVSS3: 8.1

EPSS Низкий

Описание

In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.

Ссылки

https://gist.github.com/flyyee/79f1b224069842ee320115cafa5c35c0
Third Party Advisory
https://github.com/strukturag/libheif/commit/a3ed1b1eb178c5d651d6ac619c8da3d71ac2be36
Patch
https://github.com/strukturag/libheif/issues/1226
Exploit
Issue Tracking
https://github.com/strukturag/libheif/pull/1227
Issue Tracking
Patch
https://lists.debian.org/debian-lts-announce/2024/10/msg00025.html
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:struktur:libheif:1.17.6:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00256

Низкий

8.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2024-41311

CVSS3: 8.1

ubuntu

11 месяцев назад

In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.

CVE-2024-41311

CVSS3: 8.1

debian

11 месяцев назад

In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decodi ...

SUSE-SU-2024:3960-1

suse-cvrf

10 месяцев назад

Security update for libheif

ROS-20241029-06

CVSS3: 8.1

redos

11 месяцев назад

Уязвимость libheif

GHSA-mwf7-wfvq-vc32

CVSS3: 8.1

github

11 месяцев назад

In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.

EPSS

Процентиль: 49%

0.00256

Низкий

8.1 High

CVSS3

Дефекты

CWE-125