Known vulnerabilities in libheif
Vendor:
Fedoraproject
Software:
libheif
Software CPE:
cpe:2.3:o:fedoraproject:libheif:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
22
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (22)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU135831 - Reachable Assertion CVE-2026-62377 |
CWE-617 | Low | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 29.06.2026 |
SB2026062684 SB2026081955 SB2026092303 and 2 more |
||
| #VU135517 - Out-of-bounds write CVE-2026-62291 |
CWE-787 | Medium | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 26.06.2026 |
SB2026062684 SB2026081955 SB2026082723 and 3 more |
||
| #VU135516 - Out-of-bounds read CVE-2026-62292 |
CWE-125 | Medium | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 26.06.2026 |
SB2026062684 SB2026081953 SB2026081955 and 3 more |
||
| #VU135515 - Integer underflow CVE-2026-62289 |
CWE-191 | Low | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 26.06.2026 |
SB2026062684 SB2026081953 SB2026081955 and 5 more |
||
| #VU135511 - Allocation of Resources Without Limits or Throttling CVE-2026-50142 |
CWE-770 | Medium | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 26.06.2026 |
SB2026062683 SB2026072474 SB2026092303 and 1 more |
||
| #VU135510 - Out-of-bounds read CVE-2026-49271 |
CWE-125 | Medium | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 26.06.2026 |
SB2026062682 SB2026070131 SB2026081953 and 2 more |
||
| #VU131986 - Out-of-bounds read CVE-2026-48029 |
CWE-125 | Medium | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 20.05.2026 |
SB2026052069 SB2026072474 SB2026081953 and 2 more |
||
| #VU131972 - Integer overflow CVE-2026-47714 |
CWE-190 | Medium | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 20.05.2026 |
SB2026052069 SB20260715102 SB2026072474 and 3 more |
||
| #VU131965 - Out-of-bounds read CVE-2026-41069 |
CWE-125 | Medium | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 20.05.2026 |
SB2026052069 SB2026092303 SB2026092304 |
||
| #VU131963 - Out-of-bounds read CVE-2026-47254 |
CWE-125 | Medium | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 20.05.2026 |
SB2026052069 SB2026072474 SB2026092303 and 1 more |
||
| #VU131962 - Out-of-bounds read CVE-2026-47251 |
CWE-125 | Medium | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 20.05.2026 |
SB2026052069 SB2026092303 SB2026092304 |
||
| #VU131961 - Out-of-bounds write CVE-2026-47178 |
CWE-787 | High | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 20.05.2026 |
SB2026052069 SB2026070131 SB2026081953 and 2 more |
||
| #VU131959 - Use of Uninitialized Resource CVE-2026-47247 |
CWE-908 | Medium | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 20.05.2026 |
SB2026052069 SB2026081953 SB2026092303 and 1 more |
||
| #VU131958 - NULL Pointer Dereference CVE-2026-47709 |
CWE-476 | Medium | 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 20.05.2026 |
SB2026052069 SB20260715102 SB2026072474 and 3 more |
||
| #VU121163 - Out-of-bounds read CVE-2025-68431 |
CWE-125 | Medium | 1.23.5-3.el10_2, 1.23.5-3.el10_3, 1.23.5-3.el10_4 | 12.01.2026 |
SB2026011231 SB2026011243 SB2026011253 and 6 more |
||
| #VU99286 - Out-of-bounds write CVE-2024-41311 |
CWE-787 | High | 1.19.5-3.fc40, 1.19.5-3.fc41 | 23.10.2024 |
SB2024102359 SB2024102361 SB2024102601 and 3 more |
||
| #VU87785 - Integer overflow CVE-2024-1580 |
CWE-190 | High | 1.16.1-2.el9 | 26.03.2024 |
SB2024032605 SB2024032606 SB2024032607 and 9 more |
||
| #VU84612 - Use After Free CVE-2023-49464 |
CWE-416 | High | 1.17.5-1.fc40 | 20.12.2023 |
SB2023122036 SB2023122037 SB2024062610 |
||
| #VU84611 - Memory corruption CVE-2023-49462 |
CWE-119 | High | 1.17.5-1.fc40 | 20.12.2023 |
SB2023122036 SB2023122037 SB2024062610 and 1 more |
||
| #VU84610 - Memory corruption CVE-2023-49463 |
CWE-119 | High | 1.17.5-1.fc40 | 20.12.2023 |
SB2023122036 SB2023122037 SB2024062610 |
Showing elements 1 - 20 out of 22