Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian LTS: DLA-3934-1: libheif Security Advisory Updates

debian lts
Calendar Grey October 22, 2024
Dist Debian Esm H88
Debian LTS Security Advisory DLA-3934-1 addresses out-of-bounds read in libheif, urging all users to upgrade their packages.
It was discovered that there was a potential out-of-bounds read vulnerability in libheif, a decoder and encoder for the HEIF and AVIF image formats
Topics%20covered

Topics Covered

No topics assigned

Summary

Insufficient checks in ImageOverlay::parse() could have been
exploited by an overlay image with forged offsets which could, in
turn, have led to undefined behaviour.

For Debian 11 bullseye, this problem has been fixed in version
1.11.0-1+deb11u1.

We recommend that you upgrade your libheif packages.

For the detailed security status of libheif please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/libheif

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libheif
Version: 1.11.0-1+deb11u1
CVE ID: CVE-2024-41311

Topics%20covered

Topics Covered

No topics assigned

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here