ROOT-OS-DEBIAN-13-CVE-2026-84384 CVE-2026-84384 in libheif - Patched by Root

Root has patched CVE-2026-84384 in the libheif package for Root:Debian:13. Multiple fixed versions available...

SUSE CVE-2026-84384

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompressbrotli and doinflate to grow accumulated output without an effective size limit or MemoryHandle accounting. The brotli path has no outpu...