https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:12:12.351699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05075 bdu:2026-05075 2026-10-03T06:12:12.470727+00:00 bdu:2026-05075 https://cve.radiocsirt.org/vuln/euvd-2026-275620 EUVD-2026-275620 2026-10-03T06:12:12.470774+00:00 EUVD-2026-275620 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3949 fkie_cve-2026-3949 2026-10-03T06:12:12.470788+00:00

A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called b97c8b5f198b27f375127cd597a35f2113544d03. It is advisable to implement a patch to correct this issue.

 https://cve.radiocsirt.org/vuln/ghsa-2rvx-jpm5-g848 GHSA-2rvx-jpm5-g848 2026-10-03T06:12:12.470819+00:00

A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called b97c8b5f198b27f375127cd597a35f2113544d03. It is advisable to implement a patch to correct this issue.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10460-1 openSUSE-SU-2026:10460-1 — gdk-pixbuf-loader-libheif-1.21.2-2.1 on GA media 2026-10-03T06:12:12.470835+00:00

gdk-pixbuf-loader-libheif-1.21.2-2.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:22153-1 SUSE-SU-2026:22153-1 — Security update for libheif 2026-10-03T06:12:12.470853+00:00

Security update for libheif

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3949 Withdrawn: UBUNTU-CVE-2026-3949 2026-10-03T06:12:12.470878+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:18.04:LTS: libheif, Ubuntu:Pro:20.04:LTS: libheif, Ubuntu:Pro:22.04:LTS: libheif, Ubuntu:24.04:LTS: libheif, Ubuntu:25.10: libheif

A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called b97c8b5f198b27f375127cd597a35f2113544d03. It is advisable to implement a patch to correct this issue.