All 37 CVE vulnerabilities found in libheif, with AI-generated Chinese analysis, references, and POCs.
This page aggregates known security weaknesses specifically affecting the libheif library, an open-source software product for handling HEIF image formats, categorized under various vulnerability types and tagged for efficient filtering. The collection encompasses a comprehensive range of issues including memory corruption, integer overflows, and denial-of-service flaws reported across multiple versions of the library from its initial release through the most recent security bulletins. Visitors can utilize this resource to track official vendor advisories regarding libheif updates, analyze the characteristics of specific weakness classes prevalent in image processing code, or review the complete historical record of vulnerabilities associated with this product to inform risk assessment and patch management strategies. The data presented here is derived from public security databases and vendor disclosures, providing a centralized view for researchers and system administrators seeking to understand the security posture of libheif without navigating fragmented sources. By consolidating these findings, the page facilitates a clearer understanding of how specific coding patterns in HEIF decoders and encoders have historically led to exploitable conditions, enabling more targeted remediation efforts and proactive hardening of systems relying on this library for image format support.
Vendor: Struktur
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-32738 | libheif has a Heap OOB Read/SEGV Crash via Zero samples_per_chunk CWE-125 | 6.5 | Medium | 2026-05-19 |
| CVE-2026-3950 | strukturag libheif stsz/stts track.cc load out-of-bounds CWE-125 | 3.3 | Low | 2026-03-11 |
| CVE-2026-3949 | strukturag libheif HEIF File decoder_vvdec.cc vvdec_push_data2 out-of-bounds CWE-125 | 3.3 | Low | 2026-03-11 |
| CVE-2025-68431 | libheif has Potential Heap Buffer Over-Read CWE-125 | 6.5 | Medium | 2025-12-29 |
| CVE-2025-43966 | libheif 代码问题漏洞 CWE-476 | 2.9 | Low | 2025-04-20 |
| CVE-2025-43967 | libheif 代码问题漏洞 CWE-476 | 2.9 | Low | 2025-04-20 |
| CVE-2023-0996 | libheif 安全漏洞 CWE-120 | 7.8 | - | 2023-02-24 |
All 37 known CVE vulnerabilities affecting libheif with full Chinese analysis, references, and POCs where available.