CVE-2025-43967Low 2.9libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item.0.4%
CVE-2025-43966Low 2.9libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.0.3%
CVE-2023-0996High 7.8
There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear0.3%