Known vulnerabilities in libheif

Vendor: struktur AG
Software: libheif
Software CPE: cpe:2.3:a:strukturag:libheif:*:*:*:*:*:*:*:*
Website: https://github.com/strukturag/
Total vulnerabilities: 116
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libheif libheif is affected by 116 known vulnerabilities: 11 high, 78 medium, 27 low Critical High Medium Low

Vulnerabilities (116)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147375 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147374 - Deadlock
 CWE-833 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147373 - Uncontrolled Recursion
 CWE-674 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147371 - Allocation of Resources Without Limits or Throttling
 CWE-770 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147372 - Allocation of Resources Without Limits or Throttling
 CWE-770 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147364 - Missing release of memory after effective lifetime
 CWE-401 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147365 - Uncaught Exception
 CWE-248 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147363 - Out-of-bounds read
 CWE-125 Low
No
No
 1.23.4 08.09.2026 SB2026090827
#VU146735 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146730 - NULL Pointer Dereference
 CWE-476 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146731 - Uncontrolled Memory Allocation
 CWE-789 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146732 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146733 - Integer overflow
 CWE-190 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146734 - Improper Handling of Length Parameter Inconsistency
 CWE-130 Low
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146729 - Reachable Assertion
CVE-2026-84450		 CWE-617 Low
No
No
 1.23.3 02.09.2026 SB2026090248
SB20260928239
SB2026093054
#VU146728 - Out-of-bounds write
CVE-2026-120208		 CWE-787 High
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146727 - Out-of-bounds read
 CWE-125 Low
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146726 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146725 - Deadlock
 CWE-833 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU145070 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.18.2 25.08.2026 SB2026082530


Showing elements 1 - 20 out of 116