Known vulnerabilities in libheif (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
libheif (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:libheif_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
12
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
1.1.0-2ubuntu0.1~esm4
1.6.1-1ubuntu0.1~esm4
1.12.0-2ubuntu0.1~esm4
1.17.6-1ubuntu4.8
1.17.6-1ubuntu4.7
1.21.2-3ubuntu0.4
1.17.6-1ubuntu4.6
1.20.2-1ubuntu0.6
1.21.2-3ubuntu0.3
1.20.2-1ubuntu0.5
1.21.2-3ubuntu0.2
1.1.0-2ubuntu0.1~esm3
1.6.1-1ubuntu0.1~esm3
1.12.0-2ubuntu0.1~esm3
1.17.6-1ubuntu4.4
1.20.2-1ubuntu0.4
1.21.2-3ubuntu0.1
1.1.0-2ubuntu0.1~esm2
1.6.1-1ubuntu0.1~esm2
1.12.0-2ubuntu0.1~esm2
1.17.6-1ubuntu4.2
1.19.7-1ubuntu0.1
1.20.2-1ubuntu0.1
1.16.2-2ubuntu1.1
1.14.2-1ubuntu1
1.12.0-2build3
1.12.0-2build2
1.12.0-2build1
1.6.1-1build2
1.5.1-1build1
1.3.2-2
1.2.0-1build1
1.1.0-2build1
1.19.8-1
1.19.7-1
1.19.5-1build1
1.19.5-1
1.19.3-1
1.19.1-1
1.18.2-1
1.18.2-2
1.18.1-2
1.18.1-1
1.17.6-4build2
1.17.6-4build1
1.17.6-4
1.17.6-3build2
1.17.6-3build1
1.17.6-2
1.17.6-3
1.4.0-1
1.4.0-2
1.5.0-1
1.5.1-1
1.6.0-1
1.6.1-1
1.8.0-1
1.9.1-1
1.10.0-1
1.10.0-2
1.11.0-1
1.12.0-1
1.12.0-2
1.13.0-1
1.14.2-1
1.15.1-1
1.16.2-1
1.16.2-1ubuntu1
1.16.2-2
1.16.2-2ubuntu1
1.16.2-3
1.17.0-1
1.17.1-1
1.17.1-1ubuntu1
1.17.1-1ubuntu2
1.17.1-1ubuntu3
1.17.4-1
1.17.4-1ubuntu1
1.17.6-1
1.17.6-1ubuntu1
1.17.6-1ubuntu2
1.17.6-1ubuntu3
1.17.6-1ubuntu4
1.17.6-1ubuntu4.1
1.6.1
1.6.1-1build1
1.5.0
1.5.0-1build1
1.1.0
1.0.0-1
1.1.0-1
1.1.0-2
1.2.0-1
1.3.2-1
1.3.2-1build1
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU135517 - Out-of-bounds write CVE-2026-62291 |
CWE-787 | Medium | 1.1.0-2ubuntu0.1~esm4, 1.6.1-1ubuntu0.1~esm4, 1.12.0-2ubuntu0.1~esm4, 1.17.6-1ubuntu4.8 | 26.06.2026 |
SB2026062684 SB2026081955 SB2026082723 |
||
| #VU135516 - Out-of-bounds read CVE-2026-62292 |
CWE-125 | Medium | 1.17.6-1ubuntu4.7, 1.21.2-3ubuntu0.4 | 26.06.2026 |
SB2026062684 SB2026081953 SB2026081955 and 1 more |
||
| #VU135515 - Integer underflow CVE-2026-62289 |
CWE-191 | Low | 1.1.0-2ubuntu0.1~esm4, 1.6.1-1ubuntu0.1~esm4, 1.12.0-2ubuntu0.1~esm4, 1.17.6-1ubuntu4.7, 1.17.6-1ubuntu4.8, 1.21.2-3ubuntu0.4 | 26.06.2026 |
SB2026062684 SB2026081953 SB2026081955 and 3 more |
||
| #VU135511 - Allocation of Resources Without Limits or Throttling CVE-2026-50142 |
CWE-770 | Medium | 1.20.2-1ubuntu0.6, 1.21.2-3ubuntu0.3 | 26.06.2026 |
SB2026062683 SB2026072474 |
||
| #VU135510 - Out-of-bounds read CVE-2026-49271 |
CWE-125 | Medium | 1.20.2-1ubuntu0.5, 1.21.2-3ubuntu0.2 | 26.06.2026 |
SB2026062682 SB2026070131 SB2026081953 |
||
| #VU131986 - Out-of-bounds read CVE-2026-48029 |
CWE-125 | Medium | 1.20.2-1ubuntu0.6, 1.21.2-3ubuntu0.3 | 20.05.2026 |
SB2026052069 SB2026072474 SB2026081953 |
||
| #VU131972 - Integer overflow CVE-2026-47714 |
CWE-190 | Medium | 1.17.6-1ubuntu4.6, 1.20.2-1ubuntu0.6, 1.21.2-3ubuntu0.3 | 20.05.2026 |
SB2026052069 SB20260715102 SB2026072474 and 1 more |
||
| #VU131963 - Out-of-bounds read CVE-2026-47254 |
CWE-125 | Medium | 1.20.2-1ubuntu0.6, 1.21.2-3ubuntu0.3 | 20.05.2026 |
SB2026052069 SB2026072474 |
||
| #VU131961 - Out-of-bounds write CVE-2026-47178 |
CWE-787 | High | 1.20.2-1ubuntu0.5, 1.21.2-3ubuntu0.2 | 20.05.2026 |
SB2026052069 SB2026070131 SB2026081953 |
||
| #VU131958 - NULL Pointer Dereference CVE-2026-47709 |
CWE-476 | Medium | 1.17.6-1ubuntu4.6, 1.20.2-1ubuntu0.6, 1.21.2-3ubuntu0.3 | 20.05.2026 |
SB2026052069 SB20260715102 SB2026072474 and 1 more |
||
| #VU121163 - Out-of-bounds read CVE-2025-68431 |
CWE-125 | Medium | 1.1.0-2ubuntu0.1~esm2, 1.6.1-1ubuntu0.1~esm2, 1.12.0-2ubuntu0.1~esm2, 1.17.6-1ubuntu4.2, 1.19.7-1ubuntu0.1, 1.20.2-1ubuntu0.1 | 12.01.2026 |
SB2026011231 SB2026011243 SB2026011253 and 3 more |
||
| #VU98630 - Improper input validation CVE-2024-25269 |
CWE-20 | Medium | 1.1.0-2ubuntu0.1~esm2, 1.6.1-1ubuntu0.1~esm2, 1.12.0-2ubuntu0.1~esm2, 1.17.6-1ubuntu4.2, 1.19.7-1ubuntu0.1, 1.20.2-1ubuntu0.1 | 15.10.2024 |
SB20241015171 SB2025030313 SB2025121276 and 1 more |