OSV-2023-1129
UNKNOWN READ in HeifPixelImage::overlay
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63990
Crash type: UNKNOWN READ
Crash state:
HeifPixelImage::overlay
HeifContext::decode_overlay_image
HeifContext::decode_image_planar
What each source reports
OSV No score
UNKNOWN READ in HeifPixelImage::overlay
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63990
Crash type: UNKNOWN READ
Crash state:
HeifPixelImage::overlay
HeifContext::decode_overlay_image
HeifContext::decode_image_planar
- Record
OSV-2023-1129- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libheifOSS-Fuzz |
Listed versions, plus commit ranges v1.16.2v1.17.0v1.17.1v1.17.2v1.17.3 Show 33 moreShow lessv1.17.4v1.17.5v1.17.6v1.18.0-rc1v1.18.0v1.18.1v1.18.2v1.19.0v1.19.1v1.19.2v1.19.3v1.19.4v1.19.5v1.19.6v1.19.7v1.19.8v1.20.0v1.20.1v1.20.2v1.21.0v1.21.1v1.21.2v1.22.0v1.22.1v1.22.2v1.23.0v1.23.1v1.23.2v1.23.3v1.23.4v1.23.5v1.23.6v1.23.7 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-1129 is a vulnerability with no CVSS score yet in libheif, published November 9, 2023. No source lists public exploit code. No source names a fixed version.