libheif vulnerabilities (Debian)
47 vulnerabilities.
-
libheifDebian libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder 7.7 High -
libheifDebian libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV 3.7 Low -
libheifDebian libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image) 4.0 Medium -
libheifDebian libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS 7.5 High -
libheifDebian libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames 7.5 High -
libheifDebian libheif uncompressed tiled image encoding allows out-of-bounds write 7.4 High -
libheifDebian libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS 7.5 High -
libheifDebian libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read 6.5 Medium -
libheifDebian libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289) 4.3 Medium -
libheifDebian libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items 9.8 Critical -
libheifDebian libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110) 4.3 Medium -
libheifDebian libheif: Out-of-bounds read in uncompressed unci tile range slicing 8.7 High -
libheifDebian libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions 5.3 Medium -
libheifDebian libheif: Integer underflow in Fraction constructor via double clap transform application 4.3 Medium -
libheifDebian libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check) 7.5 High -
libheifDebian libheif: Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoder 6.5 Medium -
libheifDebian libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow 7.1 High -
libheifDebian libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation 6.1 Medium -
libheifDebian libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe 6.9 Medium -
libheifDebian libheif Has Heap Buffer Overflow in `Track::get_next_sample_raw_data()` -- OOB Chunk Vector Access 6.1 Medium -
libheifDebian libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation 7.5 High -
libheifDebian libheif has Heap Out Of Bounds Write in unci subsystem 6.1 Medium -
libheifDebian libheif: Heap buffer over-read in SampleAuxInfoReader via crafted HEIF sequence file with mismatched saiz sample count 5.1 Medium -
libheifDebian libheif allows Out-of-bounds vector access leading to invalid dereference (DoS) 6.5 Medium -
libheifDebian libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride 7.1 High -
libheifDebian libheif has a heap buffer overflow in decode_mask_image() 7.1 High -
libheifDebian libheif: Uninitialized Heap Memory Information Leak via Failed Grid Tiles 6.5 Medium -
libheifDebian libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing 8.8 High -
libheifDebian libheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookup 6.5 Medium -
libheifDebian libheif has a Heap OOB Read/SEGV Crash via Zero samples_per_chunk 6.5 Medium -
libheifDebian strukturag libheif stsz/stts track.cc load out-of-bounds 4.8 Medium -
libheifDebian strukturag libheif HEIF File decoder_vvdec.cc vvdec_push_data2 out-of-bounds 4.8 Medium -
libheifDebian libheif has Potential Heap Buffer Over-Read 6.5 Medium -
libheifDebian libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image... 2.9 Low -
libheifDebian libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc. 2.9 Low -
libheifDebian In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing... 8.1 High -
libheifDebian libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an... 7.5 High -
libheifDebian libheif v1.17.5 was discovered to contain a segmentation violation via the function... 8.8 High -
libheifDebian libheif v1.17.5 was discovered to contain a segmentation violation via the function find_exif_tag... 8.8 High -
libheifDebian libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif... 8.8 High -
libheifDebian libheif v1.17.5 was discovered to contain a segmentation violation via the function... 8.8 High -
libheifDebian libheif vulnerable to segmentation fault via floating point exception 6.5 Medium -
libheifDebian There is a vulnerability in the strided image data parsing code in the emscripten wrapper for... 7.8 High -
libheifDebian Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in... 8.1 High -
libheifDebian An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to... 8.8 High -
libheifDebian Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a... 8.8 High -
libheifDebian libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context... 8.8 High