CVE-2019-11471

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::setalphachannel in heifcontext.h because heifcontext.cc mishandles references to non-existing alpha images...

CVE-2019-11471

CVE-2019-11471 affects libheif 1.4.0 with a use-after-free in HeifContext::Image::set_alpha_channel due to mishandling references to non-existing alpha images. Multiple advisories (Mageia MGASA-2019-0290/2024-0243, OSV USN 6847-1, Ubuntu USN 6847-1) indicate this issue can crash the program and c...

CVE-2019-11471

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::setalphachannel in heifcontext.h because heifcontext.cc mishandles references to non-existing alpha images...

PT-2019-12329

Name of the Vulnerable Software and Affected Versions libheif version 1.4.0 Description The issue is related to a use-after-free error in the heif::HeifContext::Image::set alpha channel function, located in heif context.h, due to mishandling of references to non-existing alpha images in heif...

CVE-2019-11471: Use After Free

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::setalphachannel in heifcontext.h because heifcontext.cc mishandles references to non-existing alpha images...

libheif/file-fuzzer: Stack-buffer-overflow in void apply_sao_internal<unsigned short>

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5660192059949056 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Stack-buffer-overflow READ 4...

libheif/file-fuzzer: Heap-buffer-overflow in derive_collocated_motion_vectors

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5721722147307520 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

libheif/file-fuzzer: Stack-buffer-overflow in void apply_sao_internal<unsigned short>

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5724458239655936 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Stack-buffer-overflow READ 4...

libheif/file-fuzzer: Heap-buffer-overflow in derive_spatial_luma_vector_prediction

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5639769940295680 Project: libheif Fuzzer: afllibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

libheif/file-fuzzer: Index-out-of-bounds in decoder_context::has_sps

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5687672851398656 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerubsanlibheif Platform Id: linux Crash Type: Index-out-of-bounds Crash...

libheif/file-fuzzer: Heap-buffer-overflow in void mc_chroma<unsigned short>

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5712760493572096 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cra...

libheif/file-fuzzer: Heap-buffer-overflow in ff_hevc_put_hevc_epel_pixels_8_sse

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5663147984158720 Project: libheif Fuzzer: afllibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address:...

libheif/file-fuzzer: Negative-size-param in heif::HeifPixelImage::fill_RGB_16bit

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5732616832024576 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Negative-size-param Crash...