tocsin

Debian/libheif: high 8.8

An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read.

Action: Upgrade libheif to 1.5.0-1 or later.

Affected

introducedfixedlast affected
01.5.0-1-

Fixed versions

1.5.0-1

Sources

published · modified · JSON