1120 matches found
CVE-2026-Wordpress
cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...
libheif-grid-nextjs-rce
libheif grid-to-GOT Next.js RCE Working proof of concept that turns CVE-2026-32740 in the hardcoded Next.js/sharp image stack into a chosen-address write and a validated /usr/bin/id callback. This is a private Fortbridge research repository. Use it only against the included lab or another system...
libheif-cve-2026-50142
CVE-2026-50142 — libheif Unbounded heap allocation in HEIF sequence parser stsz fixed-size mode Severity: High CVSS 7.5 Advisory: GHSA-jvmp-j3cw-84mh Fixed: commit a6caa38 by @farindk Time to fix: 1 hour Summary A 1,477-byte crafted HEIF file triggers 7 GB unchecked heap allocation in Chunk::Chun...
Amazon Linux 2023 : heif-pixbuf-loader, libheif, libheif-devel (ALAS2023-2026-3314)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3314 advisory. libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompressbrotli and doinflate to grow...
[SECURITY] [DSA 6583-1] libheif security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6583-1 [email protected] https://www.debian.org/security/ Aron Xu October 24, 2026 https://www.debian.org/security/faq -...
Important: libheif
Issue Overview: libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompressbrotli and doinflate to grow accumulated output without an effective size limit or MemoryHandle accounting. The brotli...
Debian dsa-6583 : heif-gdk-pixbuf - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6583 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6583-1 [email protected] https://www.debian.org/security/ Aron X...
ROS-20261023-73-0071
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0099
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0072
The vulnerability in libheif is related to integer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20261023-73-0083
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0058
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0116
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0120
The vulnerability in libheif is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
ROS-20261023-73-0062
The vulnerability in libheif is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261023-73-0093
The vulnerability of the scalenearestneighbor function in the libheif file format decoder/coder is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
ROS-20261023-73-0109
The vulnerability in libheif is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20261023-73-0128
The vulnerability in libheif is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...