Known vulnerabilities in libheif - page 2

Vendor: struktur AG
Software: libheif
Software CPE: cpe:2.3:a:strukturag:libheif:*:*:*:*:*:*:*:*
Website: https://github.com/strukturag/
Total vulnerabilities: 116
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libheif libheif is affected by 116 known vulnerabilities: 11 high, 78 medium, 27 low Critical High Medium Low

Vulnerabilities (116)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146739 - Out-of-bounds read
CVE-2026-84451		 CWE-125 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
SB20260928239
SB2026093054
#VU146737 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
 CWE-758 Low
No
No
 1.23.3 02.09.2026 SB2026090248
#VU146736 - Heap-based Buffer Overflow
 CWE-122 Medium
No
No
 1.23.3 02.09.2026 SB2026090248
#VU145256 - Out-of-bounds read
CVE-2026-84448		 CWE-125 Low
No
No
 1.23.2 25.08.2026 SB2026082574
SB20260928239
SB2026092969
and 1 more
#VU145254 - Out-of-bounds write
CVE-2026-84444		 CWE-787 Medium
No
No
 1.23.2 25.08.2026 SB2026082574
SB20260928239
SB2026093054
#VU145251 - Out-of-bounds write
 CWE-787 High
No
No
 1.23.2 25.08.2026 SB2026082574
#VU145248 - Heap-based Buffer Overflow
CVE-2026-84383		 CWE-122 High
No
No
 1.23.2 25.08.2026 SB2026082574
SB2026093054
#VU145246 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-84384		 CWE-409 Medium
No
No
 1.23.2 25.08.2026 SB2026082574
SB20260928239
SB2026092969
and 1 more
#VU145243 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-84446		 CWE-835 Medium
No
No
 1.23.2 25.08.2026 SB2026082574
SB20260928239
SB2026092969
and 1 more
#VU145239 - Allocation of Resources Without Limits or Throttling
CVE-2026-84447		 CWE-770 Medium
No
No
 1.23.2 25.08.2026 SB2026082574
SB20260928239
SB2026092969
and 1 more
#VU145241 - Allocation of Resources Without Limits or Throttling
 CWE-770 Medium
No
No
 1.23.2 25.08.2026 SB2026082574
#VU135831 - Reachable Assertion
CVE-2026-62377		 CWE-617 Low
No
No
 1.23.1 29.06.2026 SB2026062684
SB2026081955
SB2026092303
and 3 more
#VU135517 - Out-of-bounds write
CVE-2026-62291		 CWE-787 Medium
No
No
 1.23.1 26.06.2026 SB2026062684
SB2026081955
SB2026082723
and 4 more
#VU135516 - Out-of-bounds read
CVE-2026-62292		 CWE-125 Medium
No
No
 1.23.1 26.06.2026 SB2026062684
SB2026081953
SB2026081955
and 4 more
#VU135515 - Integer underflow
CVE-2026-62289		 CWE-191 Low
No
No
 1.23.1 26.06.2026 SB2026062684
SB2026081953
SB2026081955
and 6 more
#VU135513 - Out-of-bounds write
 CWE-787 Low
No
No
 1.23.1 26.06.2026 SB2026062684
#VU135514 - Out-of-bounds read
 CWE-125 Low
No
No
 1.23.1 26.06.2026 SB2026062684
#VU135511 - Allocation of Resources Without Limits or Throttling
CVE-2026-50142		 CWE-770 Medium
No
No
 1.23.0 26.06.2026 SB2026062683
SB2026072474
SB2026092303
and 2 more
#VU135510 - Out-of-bounds read
CVE-2026-49271		 CWE-125 Medium
No
No
 1.22.1 26.06.2026 SB2026062682
SB2026070131
SB2026081953
and 2 more
#VU131958 - NULL Pointer Dereference
CVE-2026-47709		 CWE-476 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
SB20260715102
SB2026072474
and 3 more


Showing elements 21 - 40 out of 116