struktur libheif

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-43967< 1.19.6libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can referencHIGH 7.50.4 %
CVE-2025-43966< 1.19.6libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.HIGH 7.50.3 %
CVE-2023-09961.14.2There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this througHIGH 7.80.3 %