CVE-2026-47254

CVE-2026-47254 affects libheif before 1.22.0. The issue arises when Track::init_sample_timing_table() stores an out-of-bounds chunk index into m_presentation_timeline if the stco-defined chunks are fewer than samples in stsz. A subsequent call to heif_track_get_next_raw_sequence_sample() reads m_...

EUVD-2026-46436

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, Track::initsampletimingtable in libheif/sequences/track.cc stores an out-of-bounds chunk index mchunks.size into mpresentationtimeline when the number of chunks defined in the stco box is less than the number of...

CVE-2026-47254

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, Track::initsampletimingtable in libheif/sequences/track.cc stores an out-of-bounds chunk index mchunks.size into mpresentationtimeline when the number of chunks defined in the stco box is less than the number of...

CVE-2026-13156

creationtimestamp| type| source ---|---|--- 2026-07-20 08:35:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2v6bh6zo2i 2026-07-21 03:00:03+00:00| seen| https://t.me/GithubRedTeam/94402 2026-07-22 00:00:31+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94402...

CVE-2026-15714

creationtimestamp| type| source ---|---|--- 2026-07-17 11:02:39+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtlzeaocf23 2026-07-17 11:02:42+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtlzhg67b24 2026-07-17 11:02:45+00:00| seen|...

CVE-2026-59840

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...

CVE-2026-15668

creationtimestamp| type| source ---|---|--- 2026-07-14 05:37:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlihy3cf62k 2026-07-19 20:06:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzld5l5o42m 2026-07-19 20:06:17+00:00| seen|...

CVE-2026-12536

creationtimestamp| type| source ---|---|--- 2026-07-13 21:41:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqknu2mb5q2x...

CVE-2026-12257

creationtimestamp| type| source ---|---|--- 2026-07-13 13:37:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjstg74rk2w 2026-07-13 14:37:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjw5m3qtw2y 2026-07-13 15:12:04+00:00| seen|...

CVE-2026-61975

creationtimestamp| type| source ---|---|--- 2026-07-13 11:38:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjm5r5slr2x 2026-07-13 13:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtubhnlx2z 2026-07-14 03:05:32+00:00| seen|...

CVE-2026-55516

creationtimestamp| type| source ---|---|--- 2026-07-10 20:56:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqczwdg25w26 2026-07-11 01:07:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhxyfvrz2y 2026-07-11 17:00:47+00:00| seen|...

CVE-2026-57256

creationtimestamp| type| source ---|---|--- 2026-07-08 12:36:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq553mopn225 2026-07-09 16:30:05+00:00| seen| https://infosec.place/objects/48afd31c-35ab-4cfa-b28d-4a27e66c1259 2026-07-10 06:24:44+00:00| seen|...

CVE-2026-48955

creationtimestamp| type| source ---|---|--- 2026-07-07 21:30:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3kgwhhbm2k 2026-07-08 14:15:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq5claiknt2n...

CVE-2026-55435

creationtimestamp| type| source ---|---|--- 2026-07-07 20:51:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3iaejgdd2x...

CVE-2026-14766

creationtimestamp| type| source ---|---|--- 2026-07-05 20:17:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwffzik2w2z 2026-07-06 19:58:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpyutry27r2d...

CVE-2026-9085

creationtimestamp| type| source ---|---|--- 2026-07-05 16:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpvx3mflvp25 2026-07-05 16:24:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvygnreh42i...

CVE-2024-10230

creationtimestamp| type| source ---|---|--- 2026-07-05 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpvlp7vtwv2s...

CVE-2026-14640

creationtimestamp| type| source ---|---|--- 2026-07-05 00:26:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpucv7n22t2k...

CVE-2026-8351

creationtimestamp| type| source ---|---|--- 2026-07-03 10:03:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqc7hkl742w 2026-07-03 20:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpreg665oi2z 2026-07-03 22:35:03+00:00| seen|...

CVE-2026-58038

A flaw was found in the Wikimedia Foundation Timeline component. This cross-site scripting XSS vulnerability allows a remote attacker to inject malicious scripts into web pages. Successful exploitation could lead to significant impacts such as information disclosure, session hijacking, or...