CVE-2023-49462 — Libheif vulnerability

7 documents6 sources
Severity
8.8HIGHNVD
EPSS
0.1%
top 67.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Struktur LibheifDebian Libheif
Timeline
PublishedDec 7
Latest updateJun 25

Description

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/libheif< libheif 1.15.1-1+deb12u1 (bookworm)
▶Debianstruktur/libheif< 1.15.1-1+deb12u1+2
▶Ubuntustruktur/libheif< 1.1.0-2ubuntu0.1~esm1+2
▶NVDstruktur/libheif1.17.5

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
OSV
libheif vulnerabilities↗2024-06-25
▶
OSV
CVE-2023-49462: libheif v1↗2023-12-07
▶
CVEList
CVE-2023-49462: libheif v1↗2023-12-07
▶
GHSA
GHSA-vhhj-cr5h-8r6h: libheif v1↗2023-12-07
▶

📋Vendor Advisories

2
Ubuntu
libheif vulnerabilities↗2024-06-25
▶
Debian
CVE-2023-49462: libheif - libheif v1.17.5 was discovered to contain a segmentation violation via the compo...↗2023
▶