https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:04:47 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-05075 bdu:2026-05075 https://cve.radiocsirt.org/vuln/bdu:2026-05075 https://cve.radiocsirt.org/vuln/euvd-2026-275620 EUVD-2026-275620 https://cve.radiocsirt.org/vuln/euvd-2026-275620 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3949 <p>A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called b97c8b5f198b27f375127cd597a35f2113544d03. It is advisable to implement a patch to correct this issue.</p> <p>A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called b97c8b5f198b27f375127cd597a35f2113544d03. It is advisable to implement a patch to correct this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3949 https://cve.radiocsirt.org/vuln/ghsa-2rvx-jpm5-g848 <p>A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called b97c8b5f198b27f375127cd597a35f2113544d03. It is advisable to implement a patch to correct this issue.</p> <p>A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called b97c8b5f198b27f375127cd597a35f2113544d03. It is advisable to implement a patch to correct this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-2rvx-jpm5-g848 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10460-1 <p>gdk-pixbuf-loader-libheif-1.21.2-2.1 on GA media</p> <p>gdk-pixbuf-loader-libheif-1.21.2-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10460-1 https://cve.radiocsirt.org/vuln/suse-su-2026:22153-1 <p>Security update for libheif</p> <p>Security update for libheif</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22153-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3949 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: libheif, Ubuntu:Pro:20.04:LTS: libheif, Ubuntu:Pro:22.04:LTS: libheif, Ubuntu:24.04:LTS: libheif, Ubuntu:25.10: libheif</p> <p>A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called b97c8b5f198b27f375127cd597a35f2113544d03. It is advisable to implement a patch to correct this issue.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: libheif, Ubuntu:Pro:20.04:LTS: libheif, Ubuntu:Pro:22.04:LTS: libheif, Ubuntu:24.04:LTS: libheif, Ubuntu:25.10: libheif</p> <p>A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called b97c8b5f198b27f375127cd597a35f2113544d03. It is advisable to implement a patch to correct this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3949