{"action":"Upgrade github.com/strukturag/libheif to 1.15.2 or later.","affected":[{"fixed":"1.15.2","introduced":"0"}],"component":"github.com/strukturag/libheif","cve_ids":["CVE-2023-29659"],"ecosystem":"Go","epss":0.00927,"exploited":false,"fixed_versions":["1.15.2"],"ghsa_id":"GHSA-22fx-6r9m-r8h9","id":"tcs_01M5KER9B3WXMRSFK5DW0NPEWZ","modified_at":"2025-01-29T22:00:08Z","published_at":"2023-05-05T18:30:17Z","references":["https://osv.dev/vulnerability/GHSA-22fx-6r9m-r8h9","https://nvd.nist.gov/vuln/detail/CVE-2023-29659","https://github.com/strukturag/libheif/issues/794","https://github.com/strukturag/libheif/commit/e05e15b57a38ec411cb9acb38512a1c36ff62991","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAE6NQBA3Q7GS6VTNDZRZZZVPPEFUEZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGKHDCS4HRZE3UGXYYDYPTIPNIBRLQ5L","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CKAE6NQBA3Q7GS6VTNDZRZZZVPPEFUEZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LGKHDCS4HRZE3UGXYYDYPTIPNIBRLQ5L"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-22fx-6r9m-r8h9","url":"https://osv.dev/vulnerability/GHSA-22fx-6r9m-r8h9"}],"summary":"libheif vulnerable to segmentation fault via floating point exception"}