Struktur Libheif vulnerabilities

• struktur libheif libheif: Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoder CVE-2026-49271 Fix available 6.5 MediumJune 9, 2026
• struktur libheif libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow CVE-2026-48029 Fix available 7.1 HighMay 28, 2026
• struktur libheif libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation CVE-2026-47714 Fix available 6.1 MediumMay 28, 2026
• struktur libheif libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe CVE-2026-47709 Fix available 6.9 MediumMay 28, 2026
• struktur libheif libheif Has Heap Buffer Overflow in `Track::get_next_sample_raw_data()` -- OOB Chunk Vector Access CVE-2026-47254 Fix available 6.1 MediumMay 28, 2026
• struktur libheif libheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data2 CVE-2026-47251 Fix available 6.8 MediumMay 28, 2026
• struktur libheif libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation CVE-2026-47247 Fix available 7.5 HighMay 28, 2026
• struktur libheif libheif has Heap Out Of Bounds Write in unci subsystem CVE-2026-47178 Fix available 6.1 MediumMay 28, 2026
• struktur libheif libheif: Heap buffer over-read in SampleAuxInfoReader via crafted HEIF sequence file with mismatched saiz sample count CVE-2026-41071 Fix available 5.1 MediumMay 22, 2026
• struktur libheif libheif allows Out-of-bounds vector access leading to invalid dereference (DoS) CVE-2026-41069 Fix available 6.5 MediumMay 22, 2026
• struktur libheif, red hat enterprise linux 10 +1 more libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing CVE-2026-32740 Public exploitFix available 8.8 HighMay 19, 2026
• struktur libheif libheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookup CVE-2026-32739 Fix available 6.5 MediumMay 19, 2026
• struktur libheif libheif has a Heap OOB Read/SEGV Crash via Zero samples_per_chunk CVE-2026-32738 Fix available 6.5 MediumMay 19, 2026
• struktur libheif libheif has Potential Heap Buffer Over-Read CVE-2025-68431 Fix available 6.5 MediumDecember 29, 2025
• struktur libheif libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image... CVE-2025-43967 Fix available 2.9 LowApril 20, 2025
• struktur libheif libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc. CVE-2025-43966 Fix available 2.9 LowApril 20, 2025
• struktur libheif Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code... CVE-2025-29482 Fix available 6.2 MediumApril 7, 2025
• struktur libheif, debian linux +1 more In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing... CVE-2024-41311 Fix available 8.1 HighOctober 15, 2024
• libheif libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an... CVE-2024-25269 Fix available 7.5 HighMarch 5, 2024
• struktur libheif libheif v1.17.5 was discovered to contain a segmentation violation via the function... CVE-2023-49464 Fix available 8.8 HighDecember 7, 2023
• struktur libheif libheif v1.17.5 was discovered to contain a segmentation violation via the function find_exif_tag... CVE-2023-49463 Fix available 8.8 HighDecember 7, 2023
• struktur libheif libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif... CVE-2023-49462 Fix available 8.8 HighDecember 7, 2023
• struktur libheif libheif v1.17.5 was discovered to contain a segmentation violation via the function... CVE-2023-49460 Fix available 8.8 HighDecember 7, 2023
• struktur libheif, fedoraproject fedora +1 more libheif vulnerable to segmentation fault via floating point exception CVE-2023-29659 Fix available 6.5 MediumMay 5, 2023
• struktur libheif There is a vulnerability in the strided image data parsing code in the emscripten wrapper for... CVE-2023-0996 Fix available 7.8 HighFebruary 24, 2023
• struktur libheif Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in... CVE-2020-23109 Fix available 8.1 HighNovember 3, 2021
• struktur libheif An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to... CVE-2020-19499 Fix available 8.8 HighJuly 21, 2021
• struktur libheif Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a... CVE-2020-19498 Fix available 8.8 HighJuly 21, 2021
• struktur libheif libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context... CVE-2019-11471 Fix available 8.8 HighApril 23, 2019