libheif vulnerabilities (Root)
20 vulnerabilities.
-
libheifRoot libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS 7.5 High -
libheifRoot libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames 7.5 High -
libheifRoot libheif uncompressed tiled image encoding allows out-of-bounds write 7.4 High -
libheifRoot libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS 7.5 High -
libheifRoot libheif: Out-of-bounds read in uncompressed unci tile range slicing 8.7 High -
libheifRoot libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check) 7.5 High -
libheifRoot libheif: Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoder 6.5 Medium -
libheifRoot libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow 7.1 High -
libheifRoot libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation 7.5 High -
libheifRoot libheif has Heap Out Of Bounds Write in unci subsystem 6.1 Medium -
libheifRoot libheif: Heap buffer over-read in SampleAuxInfoReader via crafted HEIF sequence file with mismatched saiz sample count 5.1 Medium -
libheifRoot libheif allows Out-of-bounds vector access leading to invalid dereference (DoS) 6.5 Medium -
libheifRoot libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride 7.1 High -
libheifRoot libheif has a heap buffer overflow in decode_mask_image() 7.1 High -
libheifRoot libheif: Uninitialized Heap Memory Information Leak via Failed Grid Tiles 6.5 Medium -
libheifRoot libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing 8.8 High -
libheifRoot libheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookup 6.5 Medium -
libheifRoot libheif has a Heap OOB Read/SEGV Crash via Zero samples_per_chunk 6.5 Medium -
libheifRoot libheif has Potential Heap Buffer Over-Read 6.5 Medium -
libheifRoot libheif v1.17.5 was discovered to contain a segmentation violation via the function find_exif_tag... 8.8 High