Skip to content
OpenAdvisories

Vendor

strukturag

44 known vulnerabilities.

44 results · Feed

  • Low 3.3

    strukturag libheif stsz/stts track.cc load out-of-bounds

    A vulnerability was identified in strukturag libheif up to 1.21.2. This impacts the function Track::load of the file libheif/sequences/track.cc of the component stsz/stts. The manipulation leads to out-of-bounds read. The attack needs to be performed locally.…

  • Low 3.3

    strukturag libheif HEIF File decoder_vvdec.cc vvdec_push_data2 out-of-bounds

    A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can lead to out-of-boun…

  • Medium 6.5

    libheif has Potential Heap Buffer Over-Read

    libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in `HeifPixelImage::overlay()`. The function computes a negative row length (likel…

  • High 7.4

    Heap-based Buffer Overflow in strukturag/libde265

    Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.