Поиск уязвимостей
Количество 22
Количество 22
ALT-PU-2026-1725
ALT-PU-2026-1725: package `libheif` update to version 1.21.2-alt1
CVE-2025-43966
libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.
CVE-2025-43966
libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.
CVE-2025-43966
libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden ...
GHSA-7g9v-7vc7-pmrw
libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.
BDU:2025-14111
Уязвимость функции ImageItem_iden() компонента image-items/iden.cc декодера и кодировщика форматов файлов libheif, позволяющая нарушителю выполнить произвольный код
CVE-2025-43967
libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item.
CVE-2025-43967
libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item.
CVE-2025-43967
libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid ...
CVE-2025-68431
libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in `HeifPixelImage::overlay()`. The function computes a negative row length (likely from an unclipped overlay rectangle or invalid offsets), which then underflows when converted to `size_t` and is passed to `memcpy`, causing a very large read past the end of the source plane and a crash. Version 1.21.0 contains a patch. As a workaround, avoid decoding images using `iovl` overlay boxes.
CVE-2025-68431
libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in `HeifPixelImage::overlay()`. The function computes a negative row length (likely from an unclipped overlay rectangle or invalid offsets), which then underflows when converted to `size_t` and is passed to `memcpy`, causing a very large read past the end of the source plane and a crash. Version 1.21.0 contains a patch. As a workaround, avoid decoding images using `iovl` overlay boxes.
CVE-2025-68431
libheif is an HEIF and AVIF file format decoder and encoder. Prior to ...
GHSA-c48q-x6xw-g5h8
libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item.
BDU:2025-14110
Уязвимость функции ImageItem_Grid::get_decoder() компонента image-items/grid.cc декодера и кодировщика форматов файлов libheif, позволяющая нарушителю выполнить произвольный код
openSUSE-SU-2026:20076-1
Security update for libheif
SUSE-SU-2026:0377-1
Security update for libheif
SUSE-SU-2026:0087-1
Security update for libheif
ROS-20260622-80-0030
Уязвимость libheif
ROS-20260622-73-0024
Уязвимость libheif
BDU:2026-09348
Уязвимость функции HeifPixelImage::overlay() библиотеки libheif, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-1725 ALT-PU-2026-1725: package `libheif` update to version 1.21.2-alt1 | CVSS3: 7.5 | 9 месяцев назад | |
 | CVE-2025-43966 libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
 | CVE-2025-43966 libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| CVE-2025-43966 libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden ... | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| GHSA-7g9v-7vc7-pmrw libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc. | CVSS3: 2.9 | 0% Низкий | больше 1 года назад |
 | BDU:2025-14111 Уязвимость функции ImageItem_iden() компонента image-items/iden.cc декодера и кодировщика форматов файлов libheif, позволяющая нарушителю выполнить произвольный код | CVSS3: 2.9 | 0% Низкий | больше 1 года назад |
| CVE-2025-43967 libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| CVE-2025-43967 libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| CVE-2025-43967 libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid ... | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| CVE-2025-68431 libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in `HeifPixelImage::overlay()`. The function computes a negative row length (likely from an unclipped overlay rectangle or invalid offsets), which then underflows when converted to `size_t` and is passed to `memcpy`, causing a very large read past the end of the source plane and a crash. Version 1.21.0 contains a patch. As a workaround, avoid decoding images using `iovl` overlay boxes. | CVSS3: 7.1 | 0% Низкий | 10 месяцев назад |
| CVE-2025-68431 libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in `HeifPixelImage::overlay()`. The function computes a negative row length (likely from an unclipped overlay rectangle or invalid offsets), which then underflows when converted to `size_t` and is passed to `memcpy`, causing a very large read past the end of the source plane and a crash. Version 1.21.0 contains a patch. As a workaround, avoid decoding images using `iovl` overlay boxes. | CVSS3: 7.1 | 0% Низкий | 10 месяцев назад |
| CVE-2025-68431 libheif is an HEIF and AVIF file format decoder and encoder. Prior to ... | CVSS3: 7.1 | 0% Низкий | 10 месяцев назад |
| GHSA-c48q-x6xw-g5h8 libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item. | CVSS3: 2.9 | 0% Низкий | больше 1 года назад |
| BDU:2025-14110 Уязвимость функции ImageItem_Grid::get_decoder() компонента image-items/grid.cc декодера и кодировщика форматов файлов libheif, позволяющая нарушителю выполнить произвольный код | CVSS3: 2.9 | 0% Низкий | больше 1 года назад |
 | openSUSE-SU-2026:20076-1 Security update for libheif | 0% Низкий | 10 месяцев назад | |
| SUSE-SU-2026:0377-1 Security update for libheif | 0% Низкий | 9 месяцев назад | |
| SUSE-SU-2026:0087-1 Security update for libheif | 0% Низкий | 10 месяцев назад | |
 | ROS-20260622-80-0030 Уязвимость libheif | CVSS3: 7.1 | 0% Низкий | 5 месяцев назад |
| ROS-20260622-73-0024 Уязвимость libheif | CVSS3: 7.1 | 0% Низкий | 5 месяцев назад |
| BDU:2026-09348 Уязвимость функции HeifPixelImage::overlay() библиотеки libheif, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | 11 месяцев назад |
Уязвимостей на страницу