~ / search / GHSA-22fx-6r9m-r8h9

GHSA-22fx-6r9m-r8h9

libheif vulnerable to segmentation fault via floating point exception

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-29659

Packages

EcosystemPackageAffectedFixed in
Go github.com/strukturag/libheif < 1.15.2 1.15.2

Details

As written in the advisory (Markdown source, shown as plain text).

A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.

References

External links from the advisory. They lead to third-party sites.