Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 9: MGASA-2024-0352 critical: libheif buffer overflow issue

mageia
Calendar Grey November 9, 2024
Dist Mageia Esm H88
Patch updates addressing the vulnerability in libheif for Mageia users have been released, which could permit unauthorized out-of-bounds access. Click here for further information.
In Libheif, insufficient checks in ImageOverlay::parse() while decoding a HEIF file containing an overlay image with forged offsets can lead to an out-of-bounds read and write

Summary

In Libheif, insufficient checks in ImageOverlay::parse() while decoding a HEIF file containing an overlay image with forged offsets can lead to an out-of-bounds read and write. (CVE-2024-41311)

References

- https://bugs.mageia.org/show_bug.cgi?id=33662

- https://ubuntu.com/security/notices/USN-7082-1

- https://www.cve.org/CVERecord?id=CVE-2024-41311

Topics%20covered

Topics Covered

security advisory security issue buffer overflow software update out-of-bounds Mageia libheif

Resolution

SRPMS

- 9/core/libheif-1.16.2-1.2.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 09 Nov 2024
URL: https://advisories.mageia.org/MGASA-2024-0352.html
Type: security
CVE: CVE-2024-41311

Topics%20covered

Topics Covered

security advisory security issue buffer overflow software update out-of-bounds Mageia libheif

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here