Approved changes feed: RSS · Atom

cpe:2.3:a:struktur:libheif:1.4.0:*:*:*:*:*:*:*

part: a version: 1.4.0 update: *

VendorStruktur (34d32917-61bc-5e1b-b86b-5b136ed7a1c8)
ProductLibheif (f20527f1-5965-5ed6-b5c9-a03c9d43f6bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libheif purl2cpe 2026-06-01 10:11:29.106580
pkg:deb/ubuntu/libheif purl2cpe 2026-06-01 10:11:29.106581
pkg:github/strukturag/libheif purl2cpe 2026-06-01 10:11:29.106583
pkg:rpm/opensuse/libheif purl2cpe 2026-06-01 10:11:29.106585

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-19499 vulnerable 2026-06-08 05:20:57.322207 Details available
An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read.
Published: 2021-07-21T17:21:50.000Z
Updated: 2024-08-04T14:15:27.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19498 vulnerable 2026-06-08 05:20:57.321787 Details available
Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
Published: 2021-07-21T17:20:10.000Z
Updated: 2024-08-04T14:08:30.847Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11471 vulnerable 2026-06-08 05:12:37.197859 Details available
libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images.
Published: 2019-04-23T13:55:06.000Z
Updated: 2024-08-04T22:55:40.136Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.