HIGH🇵🇱 Wersja polska

CVE-2023-49462

CVSS 8.8v3.1pub. 2023-12-07upd. 2024-11-21

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Struktur Libheif

    APP
    Struktur
    1.17.5
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-48029HIGH7.1PL ✓same product

libheif: heap OOB read w dekodowaniu siatki HEIF przez przepełnienie współrzędnych

CVE-2026-47247HIGH7.5PL ✓same product

libheif: wyciek pamięci sterty jako piksele w dekodowanych obrazach AVIF/HEIC

CVE-2026-32740HIGH8.8same product

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-ov...

CVE-2024-41311HIGH8.1same product

In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay ima...

CVE-2024-25269HIGH7.5same product

libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to ...