https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:31:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09348 bdu:2026-09348 https://cve.radiocsirt.org/vuln/bdu:2026-09348 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0917 certfr-2026-avi-0917 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0917 https://cve.radiocsirt.org/vuln/euvd-2026-264692 EUVD-2026-264692 https://cve.radiocsirt.org/vuln/euvd-2026-264692 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68431 <p>libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in `HeifPixelImage::overlay()`. The function computes a negative row length (likely from an unclipped overlay rectangle or invalid offsets), which then underflows when converted to `size_t` and is passed to `memcpy`, causing a very large read past the end of the source plane and a crash. Version 1.21.0 contains a patch. As a workaround, avoid decoding images using `iovl` overlay boxes.</p> <p>libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in `HeifPixelImage::overlay()`. The function computes a negative row length (likely from an unclipped overlay rectangle or invalid offsets), which then underflows when converted to `size_t` and is passed to `memcpy`, causing a very large read past the end of the source plane and a crash. Version 1.21.0 contains a patch. As a workaround, avoid decoding images using `iovl` overlay boxes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-68431 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10019-1 <p>gdk-pixbuf-loader-libheif-1.21.1-1.1 on GA media</p> <p>gdk-pixbuf-loader-libheif-1.21.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10019-1 https://cve.radiocsirt.org/vuln/suse-su-2026:0377-1 <p>Security update for libheif</p> <p>Security update for libheif</p> https://cve.radiocsirt.org/vuln/suse-su-2026:0377-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-68431 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: libheif, Ubuntu:Pro:20.04:LTS: libheif, Ubuntu:Pro:22.04:LTS: libheif, Ubuntu:24.04:LTS: libheif, Ubuntu:25.10: libheif, Ubuntu:26.04:LTS: libheif</p> <p>libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in `HeifPixelImage::overlay()`. The function computes a negative row length (likely from an unclipped overlay rectangle or invalid offsets), which then underflows when converted to `size_t` and is passed to `memcpy`, causing a very large read past the end of the source plane and a crash. Version 1.21.0 contains a patch. As a workaround, avoid decoding images using `iovl` overlay boxes.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: libheif, Ubuntu:Pro:20.04:LTS: libheif, Ubuntu:Pro:22.04:LTS: libheif, Ubuntu:24.04:LTS: libheif, Ubuntu:25.10: libheif, Ubuntu:26.04:LTS: libheif</p> <p>libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in `HeifPixelImage::overlay()`. The function computes a negative row length (likely from an unclipped overlay rectangle or invalid offsets), which then underflows when converted to `size_t` and is passed to `memcpy`, causing a very large read past the end of the source plane and a crash. Version 1.21.0 contains a patch. As a workaround, avoid decoding images using `iovl` overlay boxes.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-68431 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1203 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1203