CVE-2020-19498

Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts...

CVE-2020-19499: Out-of-bounds Read

An issue was discovered in heif::Boxiref::getreferences in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read...

CVE-2020-19498: Undefined Security Weakness

Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts...

libheif 安全漏洞

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. libheif version 1.4.0 suffers from a denial-of-service vulnerability. The vulnerability stems from a floating-point exception in the Fraction function. An attacker could exploit this vulnerability to cause a denial of servi...

libheif 缓冲区错误漏洞

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. libheif version 1.4.0 contains a denial-of-service vulnerability in heif::Boxiref::getreferences. The vulnerability stems from an invalid memory read. An attacker could exploit this vulnerability to cause a denial of servic...

libheif:file-fuzzer: Global-buffer-overflow in read_coding_unit

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5656817364500480 Project: libheif Fuzzing Engine: afl Fuzz Target: file-fuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000f8b47e...

libheif:file-fuzzer: Stack-buffer-overflow in void apply_sao_internal<unsigned short>

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5735040971964416 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

libheif:file-fuzzer: Heap-buffer-overflow in derive_collocated_motion_vectors

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5196643488759808 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libheif:file-fuzzer: Crash in void apply_sao_internal<unsigned short>

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5673766415237120 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61303eb5a50f Crash...

libheif:color-conversion-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6466293349875712 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: color-conversion-fuzzer Job Type: libfuzzerubsanlibheif Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00b95a5a5575 Crash State: NULL Sanitizer: undefined UBS...

libheif:file-fuzzer: Index-out-of-bounds in video_usability_information::hrd_parameters

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4616081830051840 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerubsanlibheif Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libheif:color-conversion-fuzzer: Heap-buffer-overflow in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4811360620511232 Project: libheif Fuzzing Engine: honggfuzz Fuzz Target: color-conversion-fuzzer Job Type: honggfuzzasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

libheif:file-fuzzer: Heap-buffer-overflow in Op_RGB_to_YCbCr<unsigned char>::convert_colorspace

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5134590779064320 Project: libheif Fuzzing Engine: afl Fuzz Target: file-fuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x62100001b50f Cras...

libheif:encoder-fuzzer: Heap-buffer-overflow in x265::PicYuv::copyFromPicture

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5148929759641600 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: encoder-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

PT-2021-10837

Name of the Vulnerable Software and Affected Versions libheif version 1.6.2 Description The issue is related to a buffer overflow vulnerability in the convert colorspace function in heif colorconversion.cc. This vulnerability allows attackers to cause a denial of service and disclose sensitive...

libheif:file-fuzzer: Heap-buffer-overflow in Op_RGB_to_RGB24_32::convert_colorspace

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5648321160151040 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libheif:file-fuzzer: Heap-buffer-overflow in Op_YCbCr422_to_RGB_16bit::convert_colorspace

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=6192842948214784 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

libheif:file-fuzzer: Crash in slice_segment_header::operator=

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5742814906548224 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash...

PT-2021-6488

Name of the Vulnerable Software and Affected Versions libheif version 1.4.0 Description The issue is related to a floating point exception in the Fraction function of the libheif library, which can lead to a Denial of Service or other unspecified impacts. It is also associated with errors in...

PT-2021-6709

Name of the Vulnerable Software and Affected Versions libheif version 1.4.0 Description The issue is related to an invalid memory read in the heif::Box iref::get references function, which can cause a Denial of Service or potentially other unspecified impact. It is also associated with a buffer...