Known vulnerabilities in libheif - page 2

Vendor: struktur AG
Software: libheif
Software CPE: cpe:2.3:a:strukturag:libheif:*:*:*:*:*:*:*:*
Website: https://github.com/strukturag/
Total vulnerabilities: 44
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libheif libheif is affected by 44 known vulnerabilities: 8 high, 25 medium, 11 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131986 - Out-of-bounds read
CVE-2026-48029		 CWE-125 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
SB2026072474
#VU131978 - Heap-based Buffer Overflow
CVE-2026-32741		 CWE-122 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131965 - Out-of-bounds read
CVE-2026-41069		 CWE-125 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131964 - Incorrect Calculation
 CWE-682 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131963 - Out-of-bounds read
CVE-2026-47254		 CWE-125 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
SB2026072474
#VU131962 - Out-of-bounds read
CVE-2026-47251		 CWE-125 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131961 - Out-of-bounds write
CVE-2026-47178		 CWE-787 High
No
No
 1.22.0 20.05.2026 SB2026052069
SB2026070131
#VU131960 - Integer overflow
 CWE-190 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131959 - Use of Uninitialized Resource
CVE-2026-47247		 CWE-908 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
#VU131958 - NULL Pointer Dereference
CVE-2026-47709		 CWE-476 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
SB20260715102
SB2026072474
#VU128023 - Integer overflow
 CWE-190 Low
No
No
 - 27.04.2026 SB2026042755
#VU128022 - NULL Pointer Dereference
 CWE-476 Medium
No
No
 - 27.04.2026 SB2026042755
#VU121773 - NULL Pointer Dereference
CVE-2025-43966		 CWE-476 Low
No
No
 1.19.6 20.01.2026 SB20260120202
#VU121163 - Out-of-bounds read
CVE-2025-68431		 CWE-125 Medium
No
No
 1.21.0 12.01.2026 SB2026011231
SB2026011243
SB2026011253
and 2 more
#VU99286 - Out-of-bounds write
CVE-2024-41311		 CWE-787 High
No
No
 1.18.0 23.10.2024 SB2024102359
SB2024102361
SB2024102601
and 3 more
#VU84613 - NULL Pointer Dereference
CVE-2023-49460		 CWE-476 Low
No
No
 1.17.6 20.12.2023 SB2023122036
SB2023122037
SB2024062610
#VU84612 - Use After Free
CVE-2023-49464		 CWE-416 High
No
No
 1.17.6 20.12.2023 SB2023122036
SB2023122037
SB2024062610
#VU84611 - Memory corruption
CVE-2023-49462		 CWE-119 High
No
No
 1.17.6 20.12.2023 SB2023122036
SB2023122037
SB2024062610
and 1 more
#VU84610 - Memory corruption
CVE-2023-49463		 CWE-119 High
No
No
 1.17.6 20.12.2023 SB2023122036
SB2023122037
SB2024062610
#VU76229 - Divide By Zero
CVE-2023-29659		 CWE-369 Medium
No
No
 1.15.2 16.05.2023 SB20230516120
SB2023051701
SB2023071823
and 4 more


Showing elements 21 - 40 out of 44