ROOT-OS-DEBIAN-12-CVE-2026-41069 CVE-2026-41069 in rootio-libheif - Patched by Root

Root has patched CVE-2026-41069 in the rootio-libheif package for Root:Debian:12. Multiple fixed versions available...

SUSE CVE-2026-41069

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a malformed HEIF sequence file can trigger an out-of-bounds read in core sequence parsing logic, causing DoS. A malformed file can have stco.entrycount == 0 creating no chunks while still passing validation...