CVE-2024-2045

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments...

CVE-2023-49463

libheif v1.17.5 was discovered to contain a segmentation violation via the function findexiftag at /libheif/exif.cc...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49464

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...

CVE-2023-49463

libheif v1.17.5 was discovered to contain a segmentation violation via the function findexiftag at /libheif/exif.cc...

CVE-2023-49460

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decodeuncompressedimage...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49460

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decodeuncompressedimage...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49462

CVE-2023-49462 affects libheif 1.17.5, with a segmentation fault in /libheif/exif.cc. The issue can cause instability and, per related advisories, may lead to denial of service; some sources imply potential for broader impact. Affected ecosystems cite multiple vendors (Debian, Mageia, Ubuntu, etc...

CVE-2023-49460

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decodeuncompressedimage...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

CVE-2023-49464

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...

CVE-2023-49463

libheif v1.17.5 was discovered to contain a segmentation violation via the function findexiftag at /libheif/exif.cc...

CVE-2023-49463

CVE-2023-49463 affects libheif v1.17.5, with a segmentation fault in find_exif_tag (libheif/exif.cc). Public records (NVD) rate the impact as high (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base score 8.8). Several connected advisories reference the same issue alongside other libheif CVEs (...