PT-2025-53782

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.21.0 Description libheif is a decoder and encoder for HEIF and AVIF file formats. A specially crafted HEIF file that utilizes the overlay image item path can cause a heap buffer over-read in the...

Linux Distros Unpatched Vulnerability : CVE-2025-68431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap...

Astra Linux - уязвимость в libheif

libheif before 1.19.6 has a NULL pointer dereference in ImageItemiden in image-items/iden.cc...

Astra Linux - уязвимость в libheif

libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...

EUVD-2020-15863

Malware in sbrugna...

EUVD-2019-3144

Malware in sbrugna...

EUVD-2020-11402

Malware in sbrugna...

EUVD-2020-11403

Malware in sbrugna...

EUVD-2025-10439

Malicious code in bioql PyPI...

EUVD-2024-22605

Malicious code in bioql PyPI...

EUVD-2025-11957

Malicious code in bioql PyPI...

EUVD-2025-11958

Malicious code in bioql PyPI...

EUVD-2023-53424

Malicious code in bioql PyPI...

EUVD-2023-53423

Malicious code in bioql PyPI...

EUVD-2023-53421

Malicious code in bioql PyPI...

EUVD-2023-12980

Malicious code in bioql PyPI...

EUVD-2023-1439

Malicious code in bioql PyPI...

Advisory ROSA-SA-2025-2968

software: libheif 1.19.8 WASP: ROSA-CHROME unaffected versions = libheif-1.19.8-1 affected versions libheif-1.19.8-1 CVE-ID: CVE-2025-43966 BDU-ID: None CVE-Crit: LOW CVE-DESC.: Vulnerability: In libheif before 1.19.6, the ImageItemiden function dereferences a null pointer in image-items/iden.cc...

Linux Distros Unpatched Vulnerability : CVE-2020-23109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability in function convertcolorspace in heifcolorconversion.cc in libheif v1.6.2, allows attackers to cause a denial of service and...

Linux Distros Unpatched Vulnerability : CVE-2023-0996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image fi...