CVE-2023-49460 — Libheif vulnerability

7 documents6 sources
Severity
8.8HIGHNVD
EPSS
0.1%
top 65.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Struktur LibheifDebian Libheif
Timeline
PublishedDec 7
Latest updateJun 25

Description

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decode_uncompressed_image.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/libheif< libheif 1.17.6-1 (forky)
▶Debianstruktur/libheif< 1.17.6-1+1
▶Ubuntustruktur/libheif< 1.1.0-2ubuntu0.1~esm1+2
▶NVDstruktur/libheif1.17.5

🔴Vulnerability Details

4
OSV
libheif vulnerabilities↗2024-06-25
▶
GHSA
GHSA-p36f-mqgp-4pj4: libheif v1↗2023-12-07
▶
CVEList
CVE-2023-49460: libheif v1↗2023-12-07
▶
OSV
CVE-2023-49460: libheif v1↗2023-12-07
▶

📋Vendor Advisories

2
Ubuntu
libheif vulnerabilities↗2024-06-25
▶
Debian
CVE-2023-49460: libheif - libheif v1.17.5 was discovered to contain a segmentation violation via the funct...↗2023
▶