Known vulnerabilities in libheif

Vendor: struktur AG
Software: libheif
Software CPE: cpe:2.3:a:strukturag:libheif:*:*:*:*:*:*:*:*
Website: https://github.com/strukturag/
Total vulnerabilities: 44
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libheif libheif is affected by 44 known vulnerabilities: 8 high, 25 medium, 11 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135831 - Reachable Assertion
 CWE-617 Low
No
No
 1.23.1 29.06.2026 SB2026062684
#VU135517 - Out-of-bounds write
 CWE-787 Medium
No
No
 1.23.1 26.06.2026 SB2026062684
#VU135516 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.1 26.06.2026 SB2026062684
#VU135515 - Integer underflow
 CWE-191 Low
No
No
 1.23.1 26.06.2026 SB2026062684
#VU135513 - Out-of-bounds write
 CWE-787 Low
No
No
 1.23.1 26.06.2026 SB2026062684
#VU135514 - Out-of-bounds read
 CWE-125 Low
No
No
 1.23.1 26.06.2026 SB2026062684
#VU135511 - Allocation of Resources Without Limits or Throttling
CVE-2026-50142		 CWE-770 Medium
No
No
 1.23.0 26.06.2026 SB2026062683
SB2026072474
#VU135510 - Out-of-bounds read
CVE-2026-49271		 CWE-125 Medium
No
No
 1.22.1 26.06.2026 SB2026062682
SB2026070131
#VU131977 - Out-of-bounds write
CVE-2026-32740		 CWE-787 High
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131976 - Use of Uninitialized Resource
CVE-2026-32814		 CWE-908 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
SB20260731145
#VU131975 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-32739		 CWE-835 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131974 - Out-of-bounds read
CVE-2026-32738		 CWE-125 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131973 - Out-of-bounds read
CVE-2026-32882		 CWE-125 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
SB2026072954
#VU131972 - Integer overflow
CVE-2026-47714		 CWE-190 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
SB20260715102
SB2026072474
#VU131971 - Out-of-bounds read
CVE-2026-41071		 CWE-125 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131968 - Heap-based Buffer Overflow
 CWE-122 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131969 - Integer overflow
 CWE-190 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131970 - Heap-based Buffer Overflow
 CWE-122 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131966 - Reachable Assertion
 CWE-617 Low
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131967 - Out-of-bounds read
 CWE-125 Low
No
No
 1.22.0 20.05.2026 SB2026052069


Showing elements 1 - 20 out of 44