Struktur

Products

ProductCVEsExploitedLatest
libheif3–Apr 20, 2025

Exploited and recent CVEs

  • CVE-2025-43967 Low 2.9 libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item. 0.4%
  • CVE-2025-43966 Low 2.9 libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc. 0.3%
  • CVE-2023-0996 High 7.8 There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear 0.3%