276 matches found
PT-2023-35970 · Git +1 · Libheif
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the HeifContext::interpret heif file function, which calls HeifContext::read...
The vulnerability of the heif::Fraction::round() function in the box.cc file decoder for HEIF and AVIF formats in the libheif library allows a malicious actor to cause service interruptions.
The vulnerability of the heif::Fraction::round function in the box.cc file format decoders for HEIF and AVIF formats in the libheif library is related to a floating-point exception. Exploiting this vulnerability could allow an attacker to cause service failures...
ROS-20230615-03
A vulnerability in the HEIF and AVIF libheif file format decoder is related to a floating point exception in the heif::Fraction::round function in box.cc Exploitation of the vulnerability could allow an attacker, remotely to perform a denial of service attack...
Denial Of Services (DoS)
libheif.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to the segmentation fault in the Fraction function of box.cc, allowing an attacker to cause an application crash through the floating point exception by providing maliciously crafted heif images...
[SECURITY] Fedora 36 Update: libheif-1.15.2-1.fc36
libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF AV1 Image File Format file format decoder and encoder...
[SECURITY] Fedora 37 Update: libheif-1.15.2-1.fc37
libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF AV1 Image File Format file format decoder and encoder...
[SECURITY] Fedora 38 Update: libheif-1.15.2-1.fc38
libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF AV1 Image File Format file format decoder and encoder...
CVE-2023-29659
A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round function in box.cc, which causes a denial of service...
OSV-2023-332 Heap-buffer-overflow in RegionGeometry_Polygon::parse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58183 Crash type: Heap-buffer-overflow READ 1 Crash state: RegionGeometryPolygon::parse RegionItem::parse heif::HeifContext::interpretheiffile...
PT-2023-35786 · Heif · Heif
Name of the Vulnerable Software and Affected Versions: heif affected versions not specified Description: A heap buffer overflow issue was identified, which can cause a crash. The issue occurs in the RegionItem::parse function, specifically when heif::HeifContext interprets a HEIF file or reads fr...
PT-2023-35785 · Heif · Heif
Name of the Vulnerable Software and Affected Versions: heif affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the RegionItem::parse function, which is called by heif::HeifContext::interpret heif file and heif::HeifContext::read...
ROS-20230322-01
A vulnerability in the HEIF and AVIF libheif file format decoder is related to the data parsing code of strided images in the emscripten wrapper for libheif. Exploitation of the vulnerability could allow an attacker acting remotely to use a specially crafted image file to cause a buffer overflow ...
PT-2022-36814 · Git +1 · Kimageformats
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 3 crash has been reported. The crash occurs in the HEIFHandler::ensureDecoder and HEIFHandler::read functions, as seen in the...
tifig 代码问题漏洞
tifig is a fast HEIF image converter for thumbnails from Monostream open source. A code issue vulnerability exists in tifig version v0.2.2, which stems from a memory segment exception in the getType function in its /common/bbox.cpp component...
tifig 安全漏洞
tifig is Monostream open source a fast HEIF image converter for thumbnails. tifig v0.2.2 version has a security vulnerability , the vulnerability stems from its /asan/asannewdelete.cpp component in the new has a memory leak...
tifig 资源管理错误漏洞
tifig is a Monostream open source fast HEIF image converter for thumbnails. A security vulnerability exists in tifig version v0.2.2, which stems from a heap-release reuse of its temInfoEntry function...
The vulnerability of the `heif::Box_iref::get_references` function in the Libheif library for encoding and decoding HEIF and AVIF files involves reading data beyond the permissible buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the heif::Boxiref::getreferences function in the HEIF and AVIF file encoding/decoding library Libheif lies in the reading of data beyond the permissible buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...
Google Android 代码问题漏洞
Google Android is a Linux-based open source operating system from Google, Inc. A denial-of-service vulnerability exists in Google Android, which stems from a possible crash in the re-initialization of HeifDecoderImpl.cpp due to a missing null check. A remote attacker could exploit the vulnerabili...
Microsoft HEIF Image Extensions Remote Code Execution Vulnerability
Microsoft HEIF Image Extensions is a feature library for Microsoft Windows systems from Microsoft Corporation USA.Microsoft HEIF Image Extensions is vulnerable to remote code execution, which can be exploited by attackers to execute arbitrary code on the system...