Known vulnerabilities in libheif (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:libheif_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libheif (Ubuntu package) libheif (Ubuntu package) is affected by 12 known vulnerabilities: 1 high, 10 medium, 1 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135517 - Out-of-bounds write
CVE-2026-62291
CWE-787 Medium
No
No
1.1.0-2ubuntu0.1~esm4, 1.6.1-1ubuntu0.1~esm4, 1.12.0-2ubuntu0.1~esm4, 1.17.6-1ubuntu4.8 26.06.2026 SB2026062684
SB2026081955
SB2026082723
#VU135516 - Out-of-bounds read
CVE-2026-62292
CWE-125 Medium
No
No
1.17.6-1ubuntu4.7, 1.21.2-3ubuntu0.4 26.06.2026 SB2026062684
SB2026081953
SB2026081955
and 1 more
#VU135515 - Integer underflow
CVE-2026-62289
CWE-191 Low
No
No
1.1.0-2ubuntu0.1~esm4, 1.6.1-1ubuntu0.1~esm4, 1.12.0-2ubuntu0.1~esm4, 1.17.6-1ubuntu4.7, 1.17.6-1ubuntu4.8, 1.21.2-3ubuntu0.4 26.06.2026 SB2026062684
SB2026081953
SB2026081955
and 3 more
#VU135511 - Allocation of Resources Without Limits or Throttling
CVE-2026-50142
CWE-770 Medium
No
No
1.20.2-1ubuntu0.6, 1.21.2-3ubuntu0.3 26.06.2026 SB2026062683
SB2026072474
#VU135510 - Out-of-bounds read
CVE-2026-49271
CWE-125 Medium
No
No
1.20.2-1ubuntu0.5, 1.21.2-3ubuntu0.2 26.06.2026 SB2026062682
SB2026070131
SB2026081953
#VU131986 - Out-of-bounds read
CVE-2026-48029
CWE-125 Medium
No
No
1.20.2-1ubuntu0.6, 1.21.2-3ubuntu0.3 20.05.2026 SB2026052069
SB2026072474
SB2026081953
#VU131972 - Integer overflow
CVE-2026-47714
CWE-190 Medium
No
No
1.17.6-1ubuntu4.6, 1.20.2-1ubuntu0.6, 1.21.2-3ubuntu0.3 20.05.2026 SB2026052069
SB20260715102
SB2026072474
and 1 more
#VU131963 - Out-of-bounds read
CVE-2026-47254
CWE-125 Medium
No
No
1.20.2-1ubuntu0.6, 1.21.2-3ubuntu0.3 20.05.2026 SB2026052069
SB2026072474
#VU131961 - Out-of-bounds write
CVE-2026-47178
CWE-787 High
No
No
1.20.2-1ubuntu0.5, 1.21.2-3ubuntu0.2 20.05.2026 SB2026052069
SB2026070131
SB2026081953
#VU131958 - NULL Pointer Dereference
CVE-2026-47709
CWE-476 Medium
No
No
1.17.6-1ubuntu4.6, 1.20.2-1ubuntu0.6, 1.21.2-3ubuntu0.3 20.05.2026 SB2026052069
SB20260715102
SB2026072474
and 1 more
#VU121163 - Out-of-bounds read
CVE-2025-68431
CWE-125 Medium
No
No
1.1.0-2ubuntu0.1~esm2, 1.6.1-1ubuntu0.1~esm2, 1.12.0-2ubuntu0.1~esm2, 1.17.6-1ubuntu4.2, 1.19.7-1ubuntu0.1, 1.20.2-1ubuntu0.1 12.01.2026 SB2026011231
SB2026011243
SB2026011253
and 3 more
#VU98630 - Improper input validation
CVE-2024-25269
CWE-20 Medium
No
No
1.1.0-2ubuntu0.1~esm2, 1.6.1-1ubuntu0.1~esm2, 1.12.0-2ubuntu0.1~esm2, 1.17.6-1ubuntu4.2, 1.19.7-1ubuntu0.1, 1.20.2-1ubuntu0.1 15.10.2024 SB20241015171
SB2025030313
SB2025121276
and 1 more