Known vulnerabilities in libheif - page 4

Vendor: struktur AG
Software: libheif
Software CPE: cpe:2.3:a:strukturag:libheif:*:*:*:*:*:*:*:*
Website: https://github.com/strukturag/
Total vulnerabilities: 116
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libheif libheif is affected by 116 known vulnerabilities: 11 high, 78 medium, 27 low Critical High Medium Low

Vulnerabilities (116)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153968 - Allocation of Resources Without Limits or Throttling
 CWE-770 Medium
No
No
 1.23.5 08.10.2026 SB2026100861
#VU153967 - Use After Free
 CWE-416 Medium
No
No
 1.23.5 08.10.2026 SB2026100861
#VU153966 - Out-of-bounds read
 CWE-125 Low
No
No
 1.23.5 08.10.2026 SB2026100861
#VU153965 - Incomplete Filtering of Special Elements
 CWE-791 Low
No
No
 1.23.5 08.10.2026 SB2026100861
#VU146738 - Out-of-bounds read
CVE-2026-84449		 CWE-125 Low
No
No
 1.19.6 02.09.2026 SB20260120202
SB2026092969
SB2026110140
#VU131986 - Out-of-bounds read
CVE-2026-48029		 CWE-125 Medium
No
No
 1.22.0 20.05.2026 SB2026052069
SB2026072474
SB2026081953
and 2 more
#VU128023 - Integer overflow
 CWE-190 Low
No
No
 - 27.04.2026 SB2026042755
#VU128022 - NULL Pointer Dereference
 CWE-476 Medium
No
No
 - 27.04.2026 SB2026042755
#VU121773 - NULL Pointer Dereference
CVE-2025-43966		 CWE-476 Low
No
No
 1.19.6 20.01.2026 SB20260120202
#VU121163 - Out-of-bounds read
CVE-2025-68431		 CWE-125 Medium
No
No
 1.21.0 12.01.2026 SB2026011231
SB2026011243
SB2026011253
and 8 more
#VU99286 - Out-of-bounds write
CVE-2024-41311		 CWE-787 High
No
No
 1.18.0 23.10.2024 SB2024102359
SB2024102361
SB2024102601
and 3 more
#VU84613 - NULL Pointer Dereference
CVE-2023-49460		 CWE-476 Low
No
No
 1.17.6 20.12.2023 SB2023122036
SB2023122037
SB2024062610
#VU84612 - Use After Free
CVE-2023-49464		 CWE-416 High
No
No
 1.17.6 20.12.2023 SB2023122036
SB2023122037
SB2024062610
#VU84611 - Memory corruption
CVE-2023-49462		 CWE-119 High
No
No
 1.17.6 20.12.2023 SB2023122036
SB2023122037
SB2024062610
and 1 more
#VU84610 - Memory corruption
CVE-2023-49463		 CWE-119 High
No
No
 1.17.6 20.12.2023 SB2023122036
SB2023122037
SB2024062610
#VU76229 - Divide By Zero
CVE-2023-29659		 CWE-369 Medium
No
No
 1.15.2 16.05.2023 SB20230516120
SB2023051701
SB2023071823
and 4 more
#VU74496 - Out-of-bounds read
CVE-2020-19499		 CWE-125 Low
No
No
 1.5.0 05.04.2023 SB2021073013
#VU74495 - Improper input validation
CVE-2020-19498		 CWE-20 Low
No
No
 1.5.0 05.04.2023 SB2021073013
#VU74494 - Memory corruption
CVE-2020-23109		 CWE-119 High
No
No
 1.7.0 05.04.2023 SB2021110522
SB2024062610
#VU74493 - Memory corruption
CVE-2023-0996		 CWE-119 High
No
No
 1.14.2 05.04.2023 SB2023040549
SB2023040555
SB2024062610


Showing elements 61 - 80 out of 116