ECHO-2807-9f4f-ad1f
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-2807-9f4f-ad1f.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-2807-9f4f-ad1f
- Upstream
- Withdrawn
- 2026-06-02T10:56:03Z
- Published
- 2026-05-21T02:19:44Z
- Modified
- 2026-09-15T03:33:45Z
- Summary
- Vulnerability is in libheif's image-sequence / ISOBMFF track parsing, which was added in v1.20.0. v1.19.8 — the version we ship — has no track parsing at all (no Box_stsc / Box_stts / Box_saiz / TrackBox / MovieBox), so the vulnerable code is not present.
- Details
- References