Known vulnerabilities in libheif1
Vendor:
SUSE
Software:
libheif1
Software CPE:
cpe:2.3:o:suse:libheif1:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
19
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (19)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146739 - Out-of-bounds read CVE-2026-84451 |
CWE-125 | Medium | 1.23.4-150700.3.21.1 | 02.09.2026 |
SB2026090248 SB20260928239 SB2026093054 |
||
| #VU146729 - Reachable Assertion CVE-2026-84450 |
CWE-617 | Low | 1.23.4-150700.3.21.1 | 02.09.2026 |
SB2026090248 SB20260928239 SB2026093054 |
||
| #VU145256 - Out-of-bounds read CVE-2026-84448 |
CWE-125 | Low | 1.23.4-150700.3.21.1 | 25.08.2026 |
SB2026082574 SB20260928239 SB2026092969 and 1 more |
||
| #VU145254 - Out-of-bounds write CVE-2026-84444 |
CWE-787 | Medium | 1.23.4-150700.3.21.1 | 25.08.2026 |
SB2026082574 SB20260928239 SB2026093054 |
||
| #VU145248 - Heap-based Buffer Overflow CVE-2026-84383 |
CWE-122 | High | 1.23.4-150700.3.21.1 | 25.08.2026 |
SB2026082574 SB2026093054 |
||
| #VU145246 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-84384 |
CWE-409 | Medium | 1.23.4-150700.3.21.1 | 25.08.2026 |
SB2026082574 SB20260928239 SB2026092969 and 1 more |
||
| #VU145243 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-84446 |
CWE-835 | Medium | 1.23.4-150700.3.21.1 | 25.08.2026 |
SB2026082574 SB20260928239 SB2026092969 and 1 more |
||
| #VU145239 - Allocation of Resources Without Limits or Throttling CVE-2026-84447 |
CWE-770 | Medium | 1.23.4-150700.3.21.1 | 25.08.2026 |
SB2026082574 SB20260928239 SB2026092969 and 1 more |
||
| #VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-32282 |
CWE-367 | Low | 1.12.0-150400.3.20.1 | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 51 more |
||
| #VU135831 - Reachable Assertion CVE-2026-62377 |
CWE-617 | Low | 1.23.1-150700.3.18.1 | 29.06.2026 |
SB2026062684 SB2026081955 SB2026092303 and 3 more |
||
| #VU135517 - Out-of-bounds write CVE-2026-62291 |
CWE-787 | Medium | 1.23.1-150700.3.18.1 | 26.06.2026 |
SB2026062684 SB2026081955 SB2026082723 and 4 more |
||
| #VU135516 - Out-of-bounds read CVE-2026-62292 |
CWE-125 | Medium | 1.23.1-150700.3.18.1 | 26.06.2026 |
SB2026062684 SB2026081953 SB2026081955 and 4 more |
||
| #VU135515 - Integer underflow CVE-2026-62289 |
CWE-191 | Low | 1.12.0-150400.3.23.2, 1.23.1-150700.3.18.1 | 26.06.2026 |
SB2026062684 SB2026081953 SB2026081955 and 6 more |
||
| #VU131976 - Use of Uninitialized Resource CVE-2026-32814 |
CWE-908 | Medium | 1.12.0-150400.3.20.1 | 20.05.2026 |
SB2026052069 SB20260731145 |
||
| #VU121163 - Out-of-bounds read CVE-2025-68431 |
CWE-125 | Medium | 1.12.0-150400.3.17.1, 1.19.5-150700.3.3.1 | 12.01.2026 |
SB2026011231 SB2026011243 SB2026011253 and 6 more |
||
| #VU99286 - Out-of-bounds write CVE-2024-41311 |
CWE-787 | High | 1.12.0-150400.3.14.1 | 23.10.2024 |
SB2024102359 SB2024102361 SB2024102601 and 3 more |
||
| #VU76229 - Divide By Zero CVE-2023-29659 |
CWE-369 | Medium | 1.12.0-150400.3.11.1 | 16.05.2023 |
SB20230516120 SB2023051701 SB2023071823 and 4 more |
||
| #VU74493 - Memory corruption CVE-2023-0996 |
CWE-119 | High | 1.12.0-150400.3.8.1 | 05.04.2023 |
SB2023040549 SB2023040555 SB2024062610 |
||
| #VU24306 - Heap-based Buffer Overflow CVE-2020-6851 |
CWE-122 | High | 1.23.5-150700.3.24.1 | 14.01.2020 |
SB2020011450 SB2020012821 SB2020012918 and 16 more |