1033 matches found
EUVD-2025-11957
Malicious code in bioql PyPI...
EUVD-2025-10439
Malicious code in bioql PyPI...
EUVD-2023-53423
Malicious code in bioql PyPI...
libheif:file_fuzzer: Memcpy-param-overlap in HeifPixelImage::overlay
Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=6093792387334144 Project: libheif Fuzzing Engine: honggfuzz Fuzz Target: filefuzzer Job Type: honggfuzzasanlibheif Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...
Advisory ROSA-SA-2025-2968
software: libheif 1.19.8 WASP: ROSA-CHROME unaffected versions = libheif-1.19.8-1 affected versions libheif-1.19.8-1 CVE-ID: CVE-2025-43966 BDU-ID: None CVE-Crit: LOW CVE-DESC.: Vulnerability: In libheif before 1.19.6, the ImageItemiden function dereferences a null pointer in image-items/iden.cc...
Linux Distros Unpatched Vulnerability : CVE-2020-23109
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability in function convertcolorspace in heifcolorconversion.cc in libheif v1.6.2, allows attackers to cause a denial of service and...
Linux Distros Unpatched Vulnerability : CVE-2023-0996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image fi...
TencentOS Server 4: libheif (TSSA-2025:0631)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0631 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
ROOT-OS-DEBIAN-12-CVE-2024-25269 CVE-2024-25269 in rootio-libheif - Patched by Root
Root has patched CVE-2024-25269 in the rootio-libheif package for Root:Debian:12. Multiple fixed versions available...
Advisory ROSA-SA-2025-2932
software: libheif 1.12.0 WASP: ROSA-CHROME unaffected versions = libheif-1.12.0-5 affected versions libheif-1.12.0-5 CVE-ID: CVE-2024-25269 BDU-ID: 2024-03241 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the JpegEncoder::Encode function of the libheif decoder and file format encoder is related to...
TencentOS Server 4: libheif (TSSA-2024:0637)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0637 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
libheif:box_fuzzer: Container-overflow in Box_saio::parse
Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5762812393881600 Project: libheif Fuzzing Engine: afl Fuzz Target: boxfuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Container-overflow WRITE 8 Crash Address: 0x7c97c39f7800 Crash...
libheif:file_fuzzer: Crash in HeifPixelImage::overlay
Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4759237937135616 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: filefuzzer Job Type: libfuzzerubsanlibheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5565238db003 Crash...
libheif:file_fuzzer: Container-overflow in StreamReader_memory::read
Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5123986810011648 Project: libheif Fuzzing Engine: afl Fuzz Target: filefuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Container-overflow WRITE 3 Crash Address: 0x5020000001f0 Cras...
libheif:box_fuzzer: Container-overflow in Box_saiz::parse
Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5714655106629632 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: boxfuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Container-overflow WRITE 1 Crash Address:...
SUSE CVE-2025-29482
Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO Sample Adaptive Offset processing of libde265...
SUSE CVE-2025-43966
libheif before 1.19.6 has a NULL pointer dereference in ImageItemiden in image-items/iden.cc...
SUSE CVE-2025-43967
libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...
