A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libheif | Oct 28, 2024 | May 5, 2023 |
| Suse | — | Upgrade gdk-pixbuf-loader-libheifUpgrade libheif-develUpgrade libheif1Upgrade libheif1-32bit | May 17, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade heif-gdk-pixbuf (Ubuntu Pro)Upgrade libheif-plugin-libde265Upgrade libheif-dev (Ubuntu Pro)Upgrade libheif1 (Ubuntu Pro)Upgrade libheif1Upgrade libheif-devUpgrade heif-gdk-pixbuf | Jul 1, 2024 | May 5, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub