CVE-2023-29659
1 advisory.
Go/github.com/strukturag/libheif CVE-2023-29659: medium 6.5, EPSS 0.93%
libheif vulnerable to segmentation fault via floating point exception
Action: Upgrade github.com/strukturag/libheif to 1.15.2 or later.
go get github.com/strukturag/libheif@v1.15.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.15.2 | - |
Fixed versions
| 1.15.2 |
Sources
- osv: GHSA-22fx-6r9m-r8h9
- https://nvd.nist.gov/vuln/detail/CVE-2023-29659
- https://github.com/strukturag/libheif/issues/794
- https://github.com/strukturag/libheif/commit/e05e15b57a38ec411cb9acb38512a1c36ff62991
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAE6NQBA3Q7GS6VTNDZRZZZVPPEFUEZ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGKHDCS4HRZE3UGXYYDYPTIPNIBRLQ5L
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CKAE6NQBA3Q7GS6VTNDZRZZZVPPEFUEZ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LGKHDCS4HRZE3UGXYYDYPTIPNIBRLQ5L
CVE-2023-29659 · published · modified · JSON