TI-2026-57994 CVE-2026-84383
libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items
Priority HIGH 82
libheif is a HEIF and AVIF file format decoder and encoder.
strukturag
Records114All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high43CVSS 7.0–8.9
Exploited now
strukturag records in CISA KEVNo strukturag vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
114 records
TI-2026-25594 CVE-2026-33164
NULL Pointer Dereference in libde265
Priority HIGH 77
libde265 is an open source implementation of the h.265 video codec.
TI-2023-27026 CVE-2023-49468 · GHSA-6j48-hfg3-m4hg
Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the…
Priority HIGH 73
Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at slice.cc.
TI-2023-27020 CVE-2023-49460 · GHSA-p36f-mqgp-4pj4
libheif v1.17.5 was discovered to contain a segmentation violation via the function…
Priority HIGH 73
libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decode_uncompressed_image.
Priority HIGH 72
libheif is a HEIF and AVIF file format decoder and encoder.
TI-2026-57995 CVE-2026-84384
libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS
Priority HIGH 72
libheif is a HEIF and AVIF file format decoder and encoder.
TI-2026-34830 CVE-2026-47247
libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation
Priority HIGH 72
libheif is a HEIF and AVIF file format decoder and encoder.
TI-2024-16668 CVE-2024-25269 · GHSA-cqh8-r8g2-2v3r
libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode.
Priority HIGH 72
libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode.
Priority HIGH 71
libheif is a HEIF and AVIF file format decoder and encoder.
TI-2026-33172 CVE-2026-45382
libde265 has a heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry
Priority HIGH 70
libde265 is an open source implementation of the h.265 video codec.
TI-2024-27575 CVE-2024-41311 · GHSA-mwf7-wfvq-vc32
In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file…
Priority HIGH 70
In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.
TI-2023-10674 CVE-2023-25221 · GHSA-xj8q-rwwx-7r65
Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the…
Priority HIGH 69
Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function in motion.cc.
TI-2022-23669 CVE-2022-47655 · GHSA-m9c9-fqf4-w6xr
Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback<unsigned short>
Priority HIGH 69
Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback<unsigned short>
TI-2023-23552 CVE-2023-43887 · GHSA-6xm3-xq5h-wg4m
Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the…
Priority HIGH 68
Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the num_tile_columns and num_tile_row parameters in the function pic_parameter_set::dump.
TI-2022-23679 CVE-2022-47665 · GHSA-hg94-7rm8-6vf7
Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int)
Priority HIGH 67
Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int)
TI-2022-23678 CVE-2022-47664 · GHSA-7rjh-3v3j-jqfg
Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse
Priority HIGH 67
Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse
Priority HIGH 66
libheif is a HEIF and AVIF file format decoder and encoder.
TI-2026-36523 CVE-2026-49346
libde265 has a heap buffer overflow in de265_image_get_buffer via SPS dimension integer overflow
Priority MEDIUM 64
libde265 is an open source implementation of the h.265 video codec.
TI-2026-35472 CVE-2026-48029
libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow
Priority MEDIUM 64
libheif is a HEIF and AVIF file format decoder and encoder.
TI-2026-35212 CVE-2026-47709
libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe
Priority MEDIUM 64
libheif is a HEIF and AVIF file format decoder and encoder.
TI-2026-25341 CVE-2026-32882
libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride
Priority MEDIUM 64
libheif is a HEIF and AVIF file format decoder and encoder.
Priority MEDIUM 64
libheif is a HEIF and AVIF file format decoder and encoder.
TI-2026-34834 CVE-2026-47251
libheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data2
Priority MEDIUM 63
libheif is a HEIF and AVIF file format decoder and encoder.
TI-2026-36463 CVE-2026-49271
libheif: Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoder
Priority MEDIUM 62
libheif is a HEIF and AVIF file format decoder and encoder.
TI-2026-29708 CVE-2026-41069
libheif allows Out-of-bounds vector access leading to invalid dereference (DoS)
Priority MEDIUM 62
libheif is a HEIF and AVIF file format decoder and encoder.