Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Unknown | n/a | DSA-6583-1 |
libheif security update
DebianDebian Linux, Debian libheif
|
Debian Security Advisories | |||
|
DSA-6583-1libheif security update
Executive summaryDebian has released a security update for libheif, a library used to read and write HEIF and AVIF images. The advisory says that processing specially crafted images could cause denial of service or disclosure of process memory, and it recommends upgrading libheif packages. Technical summaryThe advisory describes multiple security issues in libheif, including denial of service through excessive resource consumption or crashes and disclosure of process memory when processing crafted images. It also addresses a use-after-free and double-free in timestamp handling during image encoding, including transcoding of crafted images. For the stable distribution (trixie), the fixed version is stated as 1.23.6-2~deb13u1. The advisory does not state CVE identifiers, CVSS scores, attack vector details beyond processing crafted images, or workarounds. Detection guidance is not stated, and the advisory refers readers to the Debian security tracker for detailed status. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from lists.debian.org/debian-security-announce/2026/msg00499.html ScoreNo CVSS score published. Affects
Debian Security TeamPublished
Read the advisory
|
|||||||