Skip to content
OpenAdvisories

Package · Debian

libheif

47 known vulnerabilities.

5 results · Clear filters · Feed

  • Low 3.7

    libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV

    libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace() stores image-plane strides in an integer width that can overflow for extremely large RGB images created through heif_image_create() and hei…

  • Low 3.3

    strukturag libheif stsz/stts track.cc load out-of-bounds

    A vulnerability was identified in strukturag libheif up to 1.21.2. This impacts the function Track::load of the file libheif/sequences/track.cc of the component stsz/stts. The manipulation leads to out-of-bounds read. The attack needs to be performed locally.…

  • Low 3.3

    strukturag libheif HEIF File decoder_vvdec.cc vvdec_push_data2 out-of-bounds

    A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can lead to out-of-boun…

  • Low 2.9

    libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a gr…

  • Low 2.9

    libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.