tocsin

Debian/libheif: high 8.1

In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.

Action: Upgrade libheif to 1.15.1-1+deb12u1 or later.

Affected

introducedfixedlast affected
01.15.1-1+deb12u1-

Fixed versions

1.15.1-1+deb12u1

Sources

published · modified · JSON