Known vulnerabilities in libheif - page 2

Vendor: struktur AG
Software: libheif
Software CPE: cpe:2.3:a:strukturag:libheif:*:*:*:*:*:*:*:*
Website: https://github.com/strukturag/
Total vulnerabilities: 76
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libheif libheif is affected by 76 known vulnerabilities: 11 high, 47 medium, 18 low Critical High Medium Low

Vulnerabilities (76)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146739 - Out-of-bounds read
CVE-2026-84451		 CWE-125 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146732 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU145256 - Out-of-bounds read
CVE-2026-84448		 CWE-125 Low
No
No
 1.23.2 25.08.2026 SB2026082574
#VU145254 - Out-of-bounds write
CVE-2026-84444		 CWE-787 Medium
No
No
 1.23.2 25.08.2026 SB2026082574
#VU145251 - Out-of-bounds write
 CWE-787 High
No
No
 1.23.2 25.08.2026 SB2026082574
#VU145248 - Heap-based Buffer Overflow
CVE-2026-84383		 CWE-122 High
No
No
 1.23.2 25.08.2026 SB2026082574
#VU145246 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-84384		 CWE-409 Medium
No
No
 1.23.2 25.08.2026 SB2026082574
#VU145243 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-84446		 CWE-835 Medium
No
No
 1.23.2 25.08.2026 SB2026082574
#VU145239 - Allocation of Resources Without Limits or Throttling
CVE-2026-84447		 CWE-770 Medium
No
No
 1.23.2 25.08.2026 SB2026082574
#VU145241 - Allocation of Resources Without Limits or Throttling
 CWE-770 Medium
No
No
 1.23.2 25.08.2026 SB2026082574
#VU145070 - Out-of-bounds read
 CWE-125 Medium
No
No
 1.18.2 25.08.2026 SB2026082530
#VU135831 - Reachable Assertion
CVE-2026-62377		 CWE-617 Low
No
No
 1.23.1 29.06.2026 SB2026062684
SB2026081955
SB2026092303
and 1 more
#VU135517 - Out-of-bounds write
CVE-2026-62291		 CWE-787 Medium
No
No
 1.23.1 26.06.2026 SB2026062684
SB2026081955
SB2026082723
and 2 more
#VU135516 - Out-of-bounds read
CVE-2026-62292		 CWE-125 Medium
No
No
 1.23.1 26.06.2026 SB2026062684
SB2026081953
SB2026081955
and 3 more
#VU135515 - Integer underflow
CVE-2026-62289		 CWE-191 Low
No
No
 1.23.1 26.06.2026 SB2026062684
SB2026081953
SB2026081955
and 5 more
#VU135513 - Out-of-bounds write
 CWE-787 Low
No
No
 1.23.1 26.06.2026 SB2026062684
#VU135514 - Out-of-bounds read
 CWE-125 Low
No
No
 1.23.1 26.06.2026 SB2026062684
#VU135511 - Allocation of Resources Without Limits or Throttling
CVE-2026-50142		 CWE-770 Medium
No
No
 1.23.0 26.06.2026 SB2026062683
SB2026072474
SB2026092303
and 1 more
#VU135510 - Out-of-bounds read
CVE-2026-49271		 CWE-125 Medium
No
No
 1.22.1 26.06.2026 SB2026062682
SB2026070131
SB2026081953
and 2 more
#VU131967 - Out-of-bounds read
 CWE-125 Low
No
No
 1.22.0 20.05.2026 SB2026052069


Showing elements 21 - 40 out of 76