https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:45:37.638794+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-84444 BELL-CVE-2026-84444 2026-10-03T01:45:37.644938+00:00

Affected: Alpaquita:stream: libheif

 https://cve.radiocsirt.org/vuln/euvd-2026-373536 EUVD-2026-373536 2026-10-03T01:45:37.644985+00:00 EUVD-2026-373536 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84444 fkie_cve-2026-84444 2026-10-03T01:45:37.645000+00:00

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, heif_context_add_image_tile() accepts an independently constructed tile whose component-plane dimensions do not match the tile geometry established by the prototype image. ImageItem_uncompressed::add_image_tile() passes that tile directly to unc_encoder::encode_tile(), which lacked the check_component_sizes() gate and sizes its output from the configured tile geometry while copying the tile's actual component-plane dimensions. An oversized component plane can therefore make unc_encoder_component_interleave::encode_tile() copy attacker-controlled data beyond the heap output buffer. This issue is fixed in version 1.23.2.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11719-1 openSUSE-SU-2026:11719-1 — gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media 2026-10-03T01:45:37.645029+00:00

gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-84444 Withdrawn: UBUNTU-CVE-2026-84444 2026-10-03T01:45:37.645050+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:18.04:LTS: libheif, Ubuntu:Pro:20.04:LTS: libheif, Ubuntu:Pro:22.04:LTS: libheif, Ubuntu:24.04:LTS: libheif, Ubuntu:26.04:LTS: libheif

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, heif_context_add_image_tile() accepts an independently constructed tile whose component-plane dimensions do not match the tile geometry established by the prototype image. ImageItem_uncompressed::add_image_tile() passes that tile directly to unc_encoder::encode_tile(), which lacked the check_component_sizes() gate and sizes its output from the configured tile geometry while copying the tile's actual component-plane dimensions. An oversized component plane can therefore make unc_encoder_component_interleave::encode_tile() copy attacker-controlled data beyond the heap output buffer. This issue is fixed in version 1.23.2.