Known vulnerabilities in libheif 1.23.5

Vendor: struktur AG
Software: libheif
Version: 1.23.5
Software CPE: cpe:2.3:a:strukturag:libheif:*:*:*:*:*:*:*:*
Website: https://github.com/strukturag/
Total vulnerabilities: 32
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting libheif version 1.23.5 libheif 1.23.5 is affected by 32 vulnerabilities: 26 medium, 6 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU158745 - Deadlock
 CWE-833 Medium
No
No
 1.23.7 03.11.2026 SB2026110339
#VU158744 - Asymmetric Resource Consumption (Amplification)
 CWE-405 Medium
No
No
 1.23.7 03.11.2026 SB2026110339
#VU158743 - Access of Uninitialized Pointer
 CWE-824 Medium
No
No
 1.23.7 03.11.2026 SB2026110339
#VU158742 - Access of Uninitialized Pointer
 CWE-824 Low
No
No
 1.23.7 03.11.2026 SB2026110339
#VU153988 - Asymmetric Resource Consumption (Amplification)
 CWE-405 Medium
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153986 - Allocation of Resources Without Limits or Throttling
 CWE-770 Medium
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153987 - Allocation of Resources Without Limits or Throttling
 CWE-770 Medium
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153985 - Inefficient Algorithmic Complexity
 CWE-407 Medium
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153984 - Out-of-bounds read
 CWE-125 Low
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153983 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153981 - Improper Validation of Specified Quantity in Input
 CWE-1284 Low
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153982 - Signed to Unsigned Conversion Error
 CWE-195 Low
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153979 - Reachable Assertion
 CWE-617 Medium
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153980 - Incorrect Bitwise Shift of Integer
 CWE-1335 Medium
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153977 - Use After Free
 CWE-416 Low
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153978 - Use After Free
 CWE-416 Low
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153974 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153975 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153976 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.6 08.10.2026 SB2026100862
#VU153972 - Allocation of Resources Without Limits or Throttling
 CWE-770 Medium
No
No
 1.23.6 08.10.2026 SB2026100862


Showing elements 1 - 20 out of 32