1120 matches found
libheif-grid-nextjs-rce
libheif grid-to-GOT Next.js RCE Working proof of concept that turns CVE-2026-32740 in the hardcoded Next.js/sharp image stack into a chosen-address write and a validated /usr/bin/id callback. This is a private Fortbridge research repository. Use it only against the included lab or another system...
libheif-cve-2026-50142
CVE-2026-50142 — libheif Unbounded heap allocation in HEIF sequence parser stsz fixed-size mode Severity: High CVSS 7.5 Advisory: GHSA-jvmp-j3cw-84mh Fixed: commit a6caa38 by @farindk Time to fix: 1 hour Summary A 1,477-byte crafted HEIF file triggers 7 GB unchecked heap allocation in Chunk::Chun...
CVE-2026-Wordpress
cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...
Amazon Linux 2023 : heif-pixbuf-loader, libheif, libheif-devel (ALAS2023-2026-3314)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3314 advisory. libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompressbrotli and doinflate to grow...
[SECURITY] [DSA 6583-1] libheif security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6583-1 [email protected] https://www.debian.org/security/ Aron Xu October 24, 2026 https://www.debian.org/security/faq -...
Debian dsa-6583 : heif-gdk-pixbuf - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6583 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6583-1 [email protected] https://www.debian.org/security/ Aron X...
Medium: libheif
Issue Overview: libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompressbrotli and doinflate to grow accumulated output without an effective size limit or MemoryHandle accounting. The brotli...
ROS-20261023-73-0060
The vulnerability in libheif is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0064
The vulnerability in libheif is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20261023-73-0066
The vulnerability in libheif is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20261023-73-0069
The vulnerability in libheif is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
ROS-20261023-73-0071
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0072
The vulnerability in libheif is related to integer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20261023-73-0074
The vulnerability in libheif is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0076
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0083
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0086
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0095
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...