ROOT-OS-DEBIAN-12-CVE-2026-32739 CVE-2026-32739 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32739 in the rootio-libheif package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-32739

creationtimestamp| type| source ---|---|--- 2026-05-19 22:50:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmai2aofa52p...

CVE-2026-32739 libheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookup

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Boxstts::getsampleduration, consuming 100% CPU indefinitely with zero progress, leading to DoS. The loop has no iteration limit or timeout and...