Libheif

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-43967 LOW POC PATCH Monitor

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item. Rated low severity (CVSS 2.9), this vulnerability is no authentication required. Public exploit code available.

Null Pointer Dereference Denial Of Service Libheif

NVD GitHub

CVSS 3.1

2.9

EPSS

0.2%

CVE-2025-43966 LOW PATCH Monitor

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc. Rated low severity (CVSS 2.9), this vulnerability is no authentication required.

Null Pointer Dereference Denial Of Service Libheif

NVD GitHub

CVSS 3.1

2.9

EPSS

0.2%

CVE-2025-29482 MEDIUM POC PATCH This Month

Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO (Sample Adaptive Offset) processing of libde265. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow RCE Libheif Suse

NVD GitHub

CVSS 3.1

6.2

EPSS

0.1%

CVE-2025-43967

EPSS 0% CVSS 2.9

LOW POC PATCH Monitor

Null Pointer Dereference Denial Of Service Libheif

NVD GitHub

CVE-2025-43966

EPSS 0% CVSS 2.9

LOW PATCH Monitor

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc. Rated low severity (CVSS 2.9), this vulnerability is no authentication required.

Null Pointer Dereference Denial Of Service Libheif

NVD GitHub

CVE-2025-29482

EPSS 0% CVSS 6.2

MEDIUM POC PATCH This Month

Buffer Overflow RCE Libheif +1

NVD GitHub