In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libheif | Oct 24, 2024 | Oct 15, 2024 |
| Suse | — | Upgrade libheif-aomUpgrade libheif1Upgrade libheif-ffmpegUpgrade libheif-jpegUpgrade libheif-openjpegUpgrade gdk-pixbuf-loader-libheifUpgrade libheif-develUpgrade libheif-svtencUpgrade libheif-rav1eUpgrade libheif1-32bitUpgrade libheif-dav1d | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade libheif1 | Oct 24, 2024 | Oct 15, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub