{"id":"CVE-2024-41311","aliases":["DEBIAN-CVE-2024-41311","DLA-3934-1","DSA-5796-1","EUVD-2024-39003","GHSA-mwf7-wfvq-vc32","MGASA-2024-0352","SUSE-SU-2024:3960-1","UBUNTU-CVE-2024-41311","USN-7082-1","openSUSE-SU-2024:14579-1"],"status":"published","title":"In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing...","description":"In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00774,"percentile":0.56183,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-787"],"published":"2024-10-15T00:00:00Z","modified":"2026-11-02T12:02:45Z","fixes":[{"ecosystem":"Debian:12","package":"libheif","fixed_in":["1.15.1-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libheif","fixed_in":["1.18.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libheif","fixed_in":["1.18.1-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"libheif","fixed_in":["1.11.0-1+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libheif","fixed_in":["1.16.2-1.2.mga9","1.16.2-1.2.mga9.tainted"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"libheif","fixed_in":["1.12.0-150400.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"libheif","fixed_in":["1.12.0-150400.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"libheif","fixed_in":["1.12.0-150400.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"libheif","fixed_in":["1.12.0-150400.3.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libheif","fixed_in":["1.12.0-150400.3.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"libheif","fixed_in":["1.12.0-150400.3.14.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libheif","fixed_in":["1.17.6-1ubuntu4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-1+deb12u1"}]}],"versions":["1.15.1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-1+deb11u1"}]}],"versions":["1.11.0-1"]},{"source":"osv","ecosystem":"Debian:12","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-1+deb12u1"}]}],"versions":["1.15.1-1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-1.2.mga9"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-1.2.mga9.tainted"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150400.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150400.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150400.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150400.3.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150400.3.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-150400.3.14.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.6-1ubuntu4.1"}]}],"versions":["1.16.2-2ubuntu1","1.17.1-1ubuntu2","1.17.1-1ubuntu3","1.17.4-1ubuntu1","1.17.6-1ubuntu1","1.17.6-1ubuntu2","1.17.6-1ubuntu3","1.17.6-1ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.6-1ubuntu4.1"}]}],"versions":["1.16.2-2ubuntu1","1.17.1-1ubuntu2","1.17.1-1ubuntu3","1.17.4-1ubuntu1","1.17.6-1ubuntu1","1.17.6-1ubuntu2","1.17.6-1ubuntu3","1.17.6-1ubuntu4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.5-2.1"}]}],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"struktur","product":"libheif"}],"references":[{"url":"https://github.com/strukturag/libheif/issues/1226","tags":["Exploit","Issue Tracking","report"]},{"url":"https://github.com/strukturag/libheif/pull/1227","tags":["Issue Tracking","Patch","fix","report"]},{"url":"https://github.com/strukturag/libheif/commit/a3ed1b1eb178c5d651d6ac619c8da3d71ac2be36","tags":["Patch","fix","report"]},{"url":"https://gist.github.com/flyyee/79f1b224069842ee320115cafa5c35c0","tags":["Third Party Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00025.html","tags":["Mailing List","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41311","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mwf7-wfvq-vc32"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41311.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-41311","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0352.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33662","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7082-1","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243960-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231714","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41311","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-41311","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-41311","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29659","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-41311","description":"In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.","status":"published","published":"2024-10-15T00:00:00Z","modified":"2024-10-23T00:10:12.649Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-125","CWE-787"],"updated_at":"2026-11-02T14:34:04.00829Z"}],"euvd":[{"id":"EUVD-2024-39003","description":"In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.","status":"published","published":"2024-10-15T00:00:00Z","modified":"2024-10-23T00:10:12Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T00:05:21.823373Z"}],"ghsa":[{"id":"GHSA-mwf7-wfvq-vc32","title":"In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing...","description":"In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.","status":"published","published":"2024-10-15T21:30:39Z","modified":"2025-03-24T15:31:40Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:00:25.317617Z"}],"nvd":[{"id":"CVE-2024-41311","description":"In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.","status":"published","published":"2024-10-15T21:15:10.923Z","modified":"2026-06-17T07:47:33.89Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-125","CWE-787"],"updated_at":"2026-11-02T14:10:31.879321Z"}],"osv":[{"id":"CVE-2024-41311","description":"In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.","status":"published","published":"2024-10-15T00:00:00Z","modified":"2026-10-28T10:51:17.566744127Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:41.963899Z"},{"id":"DEBIAN-CVE-2024-41311","description":"In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.","status":"published","published":"2024-10-15T21:15:10.923Z","modified":"2026-11-02T12:02:45.894704118Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:43.156294Z"},{"id":"UBUNTU-CVE-2024-41311","description":"In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.","status":"published","published":"2024-10-15T21:15:00Z","modified":"2026-04-22T15:01:50.62057Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:54:58.679387Z"},{"id":"DLA-3934-1","title":"libheif - security update","status":"published","published":"2024-10-22T00:00:00Z","modified":"2026-03-09T01:23:12.476947Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5796-1","title":"libheif - security update","status":"published","published":"2024-10-25T00:00:00Z","modified":"2026-03-09T02:08:48.99488Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0352","title":"Updated libheif packages fix security vulnerability","description":"In Libheif, insufficient checks in ImageOverlay::parse() while decoding a\nHEIF file containing an overlay image with forged offsets can lead to an\nout-of-bounds read and write. (CVE-2024-41311)\n","status":"published","published":"2024-11-09T05:17:41Z","modified":"2026-04-16T04:41:36.376488919Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14579-1","title":"gdk-pixbuf-loader-libheif-1.19.5-2.1 on GA media","description":"These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.19.5-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-12-13T00:00:00Z","modified":"2026-02-04T03:05:01.466286Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2024:3960-1","title":"Security update for libheif","description":"This update for libheif fixes the following issues:\n\n- CVE-2024-41311: Fixed out-of-bounds read and write in ImageOverlay:parse() due to decoding a heif file containing an overlay image with forged offsets (bsc#1231714).\n","status":"published","published":"2024-11-08T15:26:22Z","modified":"2026-02-04T02:18:37.710839Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"USN-7082-1","title":"libheif vulnerability","description":"Gerrard Tai discovered that libheif did not properly validate certain\nimages, leading to out-of-bounds read and write vulnerability. If a user\nor automated system were tricked into opening a specially crafted file, an\nattacker could possibly use this issue to cause a denial of service or to\nobtain sensitive information.\n","status":"published","published":"2024-10-23T06:46:51Z","modified":"2026-04-22T10:53:43.292666Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}