strukturag libheif

• CVE-2026-120208 High 7.5 libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder 0.4%
• CVE-2026-84450 Medium 4.3 libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289) 0.3%
• CVE-2026-84449 Low 3.7 libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV 0.4%
• CVE-2026-84451 Medium 6.5 libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read 0.3%
• CVE-2026-84447 High 7.5 libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS 0.5%
• CVE-2026-84384 High 7.5 libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS 0.5%
• CVE-2026-84444 High 7.4 libheif uncompressed tiled image encoding allows out-of-bounds write 0.5%
• CVE-2026-84383 Critical 9.8 libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items 0.7%
• CVE-2026-84446 High 7.5 libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames 0.5%
• CVE-2026-84448 Medium 4.0 libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image) 0.2%
• CVE-2026-62377 Medium 4.3 libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110) 0.4%
• CVE-2026-62291 Medium 5.3 libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions 0.2%
• CVE-2026-62292 High 8.7 libheif: Out-of-bounds read in uncompressed unci tile range slicing 0.6%
• CVE-2026-62289 Medium 4.3 libheif: Integer underflow in Fraction constructor via double clap transform application 0.3%
• CVE-2026-50142 High 7.5 libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check) 0.7%
• CVE-2026-48029 High 7.1 libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow 0.4%
• CVE-2026-47709 Medium 6.9 libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe 0.2%
• CVE-2026-47254 Medium 6.1 libheif Has Heap Buffer Overflow in `Track::get_next_sample_raw_data()` -- OOB Chunk Vector Access 0.2%
• CVE-2026-47251 Medium 6.8 libheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data2 0.2%
• CVE-2026-47247 High 7.5 libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation 0.5%
• CVE-2026-47178 Medium 6.1 libheif has Heap Out Of Bounds Write in unci subsystem 0.2%
• CVE-2026-47714 Medium 6.1 libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation 0.2%
• CVE-2026-49271 Medium 6.5 libheif: Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoder 0.4%
• CVE-2026-41071 Medium 5.1 libheif: Heap buffer over-read in SampleAuxInfoReader via crafted HEIF sequence file with mismatched saiz sample count 0.3%
• CVE-2026-41069 Medium 6.5 libheif allows Out-of-bounds vector access leading to invalid dereference (DoS) 0.3%
• CVE-2026-32882 High 7.1 libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride 0.7%
• CVE-2026-32741 High 7.1 libheif has a heap buffer overflow in decode_mask_image() 0.3%
• CVE-2026-32814 Medium 6.5 libheif: Uninitialized Heap Memory Information Leak via Failed Grid Tiles 0.3%
• CVE-2026-32740 High 8.8 libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing 0.7%
• CVE-2026-32739 Medium 6.5 libheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookup 0.3%
• CVE-2026-32738 Medium 6.5 libheif has a Heap OOB Read/SEGV Crash via Zero samples_per_chunk 0.3%
• CVE-2026-3950 Low 3.3 strukturag libheif stsz/stts track.cc load out-of-bounds 0.2%
• CVE-2026-3949 Low 3.3 strukturag libheif HEIF File decoder_vvdec.cc vvdec_push_data2 out-of-bounds 0.1%
• CVE-2025-68431 Medium 6.5 libheif has Potential Heap Buffer Over-Read 0.4%