Release | Version |
---|---|
buster | 1.3.2-2+deb10u3 |
bullseye | 1.11.0-1 |
bullseye (security) | 1.11.0-1+deb11u2 |
bookworm | 1.15.1-1+deb12u1 |
trixie | 1.19.3-1 |
sid | 1.19.3-1 |
Bug | buster | bullseye | bookworm | trixie | sid | Description |
---|---|---|---|---|---|---|
CVE-2020-23109 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | Buffer overflow vulnerability in function convert_colorspace in heif_c ... |
CVE-2020-19499 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | An issue was discovered in heif::Box_iref::get_references in libheif 1 ... |
CVE-2020-19498 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | Floating point exception in function Fraction in libheif 1.4.0, allows ... |
Bug | buster | bullseye | bookworm | trixie | sid | Description |
---|---|---|---|---|---|---|
CVE-2024-25269 | vulnerable | vulnerable | vulnerable | fixed | fixed | libheif <= 1.17.6 contains a memory leak in the function JpegEncoder:: ... |
CVE-2023-49463 | fixed | vulnerable | vulnerable | fixed | fixed | libheif v1.17.5 was discovered to contain a segmentation violation via ... |
Bug | Description |
---|---|
CVE-2024-41311 | In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decodi ... |
CVE-2023-49464 | libheif v1.17.5 was discovered to contain a segmentation violation via ... |
CVE-2023-49462 | libheif v1.17.5 was discovered to contain a segmentation violation via ... |
CVE-2023-49460 | libheif v1.17.5 was discovered to contain a segmentation violation via ... |
CVE-2023-29659 | A Segmentation fault caused by a floating point exception exists in li ... |
CVE-2023-0996 | There is a vulnerability in the strided image data parsing code in the ... |
CVE-2019-11471 | libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_al ... |
DSA / DLA | Description |
---|---|
DLA-3945-1 | libheif - security update |
ELA-1229-1 | libheif - security update |
DSA-5796-1 | libheif - security update |
DLA-3934-1 | libheif - security update |
ELA-1211-1 | libheif - security update |