https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:54:46 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-84451 <p><strong>Affected:</strong> Alpaquita:stream: libheif</p> <p><strong>Affected:</strong> Alpaquita:stream: libheif</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-84451 https://cve.radiocsirt.org/vuln/euvd-2026-375474 EUVD-2026-375474 https://cve.radiocsirt.org/vuln/euvd-2026-375474 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84451 <p>libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of unc_decoder::get_compressed_image_data_uncompressed() in libheif/codecs/uncompressed/unc_decoder.cc retains an addition-based range check that can wrap when a crafted uncompressed tile grid produces a large range_start_offset and range_size. The overflow makes the bounds comparison pass and allows heif_image_handle_decode_image_tile() to call memcpy() with an invalid source pointer and a very large length when decoding a valid high-index advertised tile. This incomplete remediation of CVE-2026-62292 can reliably crash tile-processing applications, while whole-image decoding is not claimed to reach the demonstrated path. This issue is fixed in version 1.23.3.</p> <p>libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of unc_decoder::get_compressed_image_data_uncompressed() in libheif/codecs/uncompressed/unc_decoder.cc retains an addition-based range check that can wrap when a crafted uncompressed tile grid produces a large range_start_offset and range_size. The overflow makes the bounds comparison pass and allows heif_image_handle_decode_image_tile() to call memcpy() with an invalid source pointer and a very large length when decoding a valid high-index advertised tile. This incomplete remediation of CVE-2026-62292 can reliably crash tile-processing applications, while whole-image decoding is not claimed to reach the demonstrated path. This issue is fixed in version 1.23.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-84451 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11719-1 <p>gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media</p> <p>gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11719-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-84451 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: libheif, Ubuntu:Pro:20.04:LTS: libheif, Ubuntu:Pro:22.04:LTS: libheif, Ubuntu:24.04:LTS: libheif, Ubuntu:26.04:LTS: libheif</p> <p>[Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read]</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: libheif, Ubuntu:Pro:20.04:LTS: libheif, Ubuntu:Pro:22.04:LTS: libheif, Ubuntu:24.04:LTS: libheif, Ubuntu:26.04:LTS: libheif</p> <p>[Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read]</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-84451