← Back

Libheif

libheif

Vendor: Struktur • 29 CVEs

CVEs (29)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Struktur
1Libheif
Jun 17, 2026
Dec 7, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
libheif v1.17.5 was discovered to contain a segmentation violation via the function find_exif_tag at /libheif/exif.cc.
1Struktur
1Libheif
Jun 17, 2026
Dec 7, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc.
1Struktur
1Libheif
Jun 17, 2026
Dec 7, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decode_uncompressed_image.
2Fedoraproject
Struktur
2Fedora
Libheif
Jun 17, 2026
May 5, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.
1Struktur
1Libheif
Jun 17, 2026
Feb 24, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a mem...Show more
There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call. Show less
1Struktur
1Libheif
Jun 17, 2026
Nov 3, 2021
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attackers to cause a denial of service and disclose sensitive information, via a crafted HEIF file.
1Struktur
1Libheif
Jun 17, 2026
Jul 21, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read.
1Struktur
1Libheif
Jun 17, 2026
Jul 21, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
1Struktur
1Libheif
Jun 17, 2026
Apr 23, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images.