Known vulnerabilities in libheif 1.23.2

Vendor: struktur AG
Software: libheif
Version: 1.23.2
Software CPE: cpe:2.3:a:strukturag:libheif:*:*:*:*:*:*:*:*
Website: https://github.com/strukturag/
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting libheif version 1.23.2 libheif 1.23.2 is affected by 20 vulnerabilities: 1 high, 16 medium, 3 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147375 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147374 - Deadlock
 CWE-833 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147373 - Uncontrolled Recursion
 CWE-674 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147371 - Allocation of Resources Without Limits or Throttling
 CWE-770 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147372 - Allocation of Resources Without Limits or Throttling
 CWE-770 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147364 - Missing release of memory after effective lifetime
 CWE-401 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147365 - Uncaught Exception
 CWE-248 Medium
No
No
 1.23.4 08.09.2026 SB2026090827
#VU147363 - Out-of-bounds read
 CWE-125 Low
No
No
 1.23.4 08.09.2026 SB2026090827
#VU146739 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146736 - Heap-based Buffer Overflow
 CWE-122 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146735 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146730 - NULL Pointer Dereference
 CWE-476 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146731 - Uncontrolled Memory Allocation
 CWE-789 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146732 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146733 - Integer overflow
 CWE-190 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146734 - Improper Handling of Length Parameter Inconsistency
 CWE-130 Low
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146729 - Reachable Assertion
 CWE-617 Low
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146728 - Out-of-bounds write
 CWE-787 High
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146726 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146725 - Deadlock
 CWE-833 Medium
No
No
 1.23.3 02.09.2026 SB2026090248