CVE-2024-25269

2024-03-0501:15:06

Google

osv.dev

libheif

software

memory leak

cve-2024-25269

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service attack.

CPENameOperatorVersion
libheifeq1.13.0-1
libheifeq1.17.6-1
libheifeq1.16.2-2
libheifeq1.17.4-1
libheifeq1.14.2-1
libheifeq1.11.0-1
libheifeq1.12.0-2
libheifeq1.12.0-1
libheifeq1.15.1-1
libheifeq1.16.2-3

Name	Operator	Version
libheif	eq	1.13.0-1
libheif	eq	1.17.6-1
libheif	eq	1.16.2-2
libheif	eq	1.17.4-1
libheif	eq	1.14.2-1
libheif	eq	1.11.0-1
libheif	eq	1.12.0-2
libheif	eq	1.12.0-1
libheif	eq	1.15.1-1
libheif	eq	1.16.2-3