Advisory ROSA-SA-2025-2631

software: libheif 1.12.0 WASP: ROSA-CHROME packageevrstring: libheif-1.12.0-4 CVE-ID: CVE-2021-36410 BDU-ID: 2023-01688 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the putepelhvfallback function of the fallback-motion.cc component of the h.265 Libde265 video codec implementation is related to...

Astra Linux – Vulnerability in libheif

A segmentation fault caused by a floating-point exception exists in libheif 1.15.1 when using crafted heif images through the heif::Fraction::round function in box.cc, which results in a denial of service...

The vulnerability of the ImageOverlay::parse() function in the decoder and encoder for video and photo files in the libheif library allows a hacker to access confidential information.

The vulnerability of the ImageOverlay::parse function, used by the decoder and encoder for video and photo files in the libheif library, involves reading beyond the memory boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

Mageia: Security Advisory (MGASA-2024-0352)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libheif packages fix security vulnerability

In Libheif, insufficient checks in ImageOverlay::parse while decoding a HEIF file containing an overlay image with forged offsets can lead to an out-of-bounds read and write. CVE-2024-41311...

MGASA-2024-0352 Updated libheif packages fix security vulnerability

In Libheif, insufficient checks in ImageOverlay::parse while decoding a HEIF file containing an overlay image with forged offsets can lead to an out-of-bounds read and write. CVE-2024-41311...

SUSE SLED15: gdk-pixbuf-loader-libheif / libheif-devel / libheif1 / etc (SUSE-SU-2024:3960-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3960-1 advisory. - CVE-2024-41311: Fixed out-of-bounds read and write in ImageOverlay:parse due to decoding a heif file...

openSUSE Security Advisory (SUSE-SU-2024:3960-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for libheif

This update for libheif fixes the following issues: CVE-2024-41311: Fixed out-of-bounds read and write in ImageOverlay:parse due to decoding a heif file containing an overlay image with forged offsets bsc1231714. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...

SUSE-SU-2024:3960-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2024-41311: Fixed out-of-bounds read and write in ImageOverlay:parse due to decoding a heif file containing an overlay image with forged offsets bsc1231714...

Debian: Security Advisory (DLA-3945-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3945-1] libheif security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3945-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 05, 2024 https://wiki.debian.org/LTS -...

Debian dla-3945 : heif-gdk-pixbuf - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3945 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3945-1 [email protected]...

DLA-3945-1 libheif - security update

Bulletin has no description...

ROS-20241029-06

A vulnerability in the ImageOverlay::parse function of the libheif file format decoder and encoder is related to insufficient checking when decoding a HEIF file containing an overlaid image with spurious offsets. Exploitation of the vulnerability could allow an attacker acting remotely to gain...

Debian: Security Advisory (DSA-5796-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5796-1] libheif security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5796-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 25, 2024 https://www.debian.org/security/faq -...

Debian dsa-5796 : heif-gdk-pixbuf - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5796 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5796-1 [email protected] https://www.debian.org/securit...

DSA-5796-1 libheif - security update

Bulletin has no description...

USN-7082-1 libheif vulnerability

Gerrard Tai discovered that libheif did not properly validate certain images, leading to out-of-bounds read and write vulnerability. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or to obtai...