SUSE SLED15: gdk-pixbuf-loader-libheif / libheif-aom / libheif-dav1d / etc (SUSE-SU-2026:3597-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3597-1 advisory. Update to version 1.23.1 jscPED-16355. Security issues fixed: - CVE-2026-62289: integer underflow in Fraction...

Security update for libheif

This update for libheif fixes the following issues: Update to version 1.23.1 jscPED-16355. Security issues fixed: CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application bsc1273079. CVE-2026-62291: heap out-of-bounds write in the uncompressed encoder when...

SUSE-SU-2026:3597-1 Security update for libheif

This update for libheif fixes the following issues: Update to version 1.23.1 jscPED-16355. Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application bsc1273079. - CVE-2026-62291: heap out-of-bounds write in the uncompressed encoder wh...

Debian dsa-6417 : heif-gdk-pixbuf - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6417 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6417-1 [email protected] https://www.debian.org/securit...

[SECURITY] [DSA 6417-1] libheif security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6417-1 [email protected] https://www.debian.org/security/ Aron Xu August 08, 2026 https://www.debian.org/security/faq -...

JLSEC-2026-1193

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItemGrid::decodegridtile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue...

Linux Distros Unpatched Vulnerability : CVE-2026-62289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or AVIF file containing a clean aperture box can reduce an ima...

PT-2026-76729

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem Grid::decode grid tile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue...

Linux Distros Unpatched Vulnerability : CVE-2026-62292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafted uncompressed HEIF image using generic zlib unci full-item...

JLSEC-2026-1095

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file uncompressed unci codec, tiled, component-interleaved, 4:2:0 triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer o...

JLSEC-2026-1100

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...

JLSEC-2026-1098

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, Track::initsampletimingtable in libheif/sequences/track.cc stores an out-of-bounds chunk index mchunks.size into mpresentationtimeline when the number of chunks defined in the stco box is less than the number of...

PT-2026-76138

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32 MAX, wrapping t...

PT-2026-76139

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompressed HEIF decoder validates explicit icef compressed-unit offsets using unit offset + unit size. Because the addition can wrap, a crafted HEIF file can pass the range check and then construct a vector...

PT-2026-76134

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file uncompressed unci codec, tiled, component-interleaved, 4:2:0 triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer o...

PT-2026-76137

libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API heif image handle get image tiling when a malformed uncompressed HEIF image item has an associated uncC property but no associated ispe property. In debug builds this trips the ispe &&...

PT-2026-76135

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side image processor WordPress, Sharp/libvips,...

PT-2026-76136

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, Track::init sample timing table in libheif/sequences/track.cc stores an out-of-bounds chunk index m chunks.size into m presentation timeline when the number of chunks defined in the stco box is less than the numb...

gdk-pixbuf-loader-libheif-1.23.1-1.1 on GA media (moderate)

gdk-pixbuf-loader-libheif-1.23.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11416-1 Rating: moderate Cross-References: CVE-2026-62289 CVE-2026-62291 CVE-2026-62292 CVE-2026-62377 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Descriptio...

PT-2026-67254

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.1 Description A crafted HEIF sequence processed by the heif context read from memory function can result in a context with no registered sequence tracks. This leads to a crash when the heif context get trackctx, ...