https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:29:53.932009+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-84447 BELL-CVE-2026-84447 2026-10-03T10:29:54.032905+00:00

Affected: Alpaquita:stream: libheif

 https://cve.radiocsirt.org/vuln/euvd-2026-372016 EUVD-2026-372016 2026-10-03T10:29:54.032969+00:00 EUVD-2026-372016 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84447 fkie_cve-2026-84447 2026-10-03T10:29:54.032991+00:00

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processed_ids is copied per branch and ImageItem::decode_image() has no shared operation budget. This vulnerability is fixed in 1.23.2.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11719-1 openSUSE-SU-2026:11719-1 — gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media 2026-10-03T10:29:54.033032+00:00

gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-84447 UBUNTU-CVE-2026-84447 2026-10-03T10:29:54.033067+00:00

Affected: Ubuntu:Pro:18.04:LTS: libheif, Ubuntu:Pro:20.04:LTS: libheif, Ubuntu:Pro:22.04:LTS: libheif, Ubuntu:24.04:LTS: libheif, Ubuntu:26.04:LTS: libheif

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processed_ids is copied per branch and ImageItem::decode_image() has no shared operation budget. This vulnerability is fixed in 1.23.2.