Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-48029 →

DEBIAN-CVE-2026-48029

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile vi...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 libheif

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 libheif

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.8-1+deb13u1"}]}]

Debian:14 libheif

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.1-1"}]}]

Références

advisory security-tracker.debian.org