Known vulnerabilities in media-libs/libheif

Vendor: Gentoo
Software: media-libs/libheif
Software CPE: cpe:2.3:o:gentoo:media-libs_libheif:*:*:*:*:*:gentoo_linux:*:*
Website:
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting media-libs/libheif media-libs/libheif is affected by 18 known vulnerabilities: 3 high, 15 medium Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135510 - Out-of-bounds read
CVE-2026-49271		 CWE-125 Medium
No
No
 1.23.7 26.06.2026 SB2026062682
SB2026070131
SB2026081953
and 3 more
#VU131986 - Out-of-bounds read
CVE-2026-48029		 CWE-125 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB2026072474
SB2026081953
and 3 more
#VU131978 - Heap-based Buffer Overflow
CVE-2026-32741		 CWE-122 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB2026081953
SB20261111134
#VU131977 - Out-of-bounds write
CVE-2026-32740		 CWE-787 High
No
No
 1.23.7 20.05.2026 SB2026052069
SB2026081953
SB20261111134
#VU131976 - Use of Uninitialized Resource
CVE-2026-32814		 CWE-908 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB20260731145
SB20261111134
#VU131975 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-32739		 CWE-835 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB20261111134
#VU131974 - Out-of-bounds read
CVE-2026-32738		 CWE-125 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB20261111134
#VU131973 - Out-of-bounds read
CVE-2026-32882		 CWE-125 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB2026072954
SB2026081953
and 1 more
#VU131972 - Integer overflow
CVE-2026-47714		 CWE-190 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB20260715102
SB2026072474
and 4 more
#VU131971 - Out-of-bounds read
CVE-2026-41071		 CWE-125 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB20261111134
#VU131965 - Out-of-bounds read
CVE-2026-41069		 CWE-125 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB2026092303
SB2026092304
and 1 more
#VU131963 - Out-of-bounds read
CVE-2026-47254		 CWE-125 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB2026072474
SB2026092303
and 2 more
#VU131962 - Out-of-bounds read
CVE-2026-47251		 CWE-125 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB2026092303
SB2026092304
and 1 more
#VU131961 - Out-of-bounds write
CVE-2026-47178		 CWE-787 High
No
No
 1.23.7 20.05.2026 SB2026052069
SB2026070131
SB2026081953
and 3 more
#VU131959 - Use of Uninitialized Resource
CVE-2026-47247		 CWE-908 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB2026081953
SB2026092303
and 2 more
#VU131958 - NULL Pointer Dereference
CVE-2026-47709		 CWE-476 Medium
No
No
 1.23.7 20.05.2026 SB2026052069
SB20260715102
SB2026072474
and 4 more
#VU76229 - Divide By Zero
CVE-2023-29659		 CWE-369 Medium
No
No
 1.23.7 16.05.2023 SB20230516120
SB2023051701
SB2023071823
and 5 more
#VU74493 - Memory corruption
CVE-2023-0996		 CWE-119 High
No
No
 1.23.7 05.04.2023 SB2023040549
SB2023040555
SB2024062610
and 1 more