ECHO-c8e7-731e-b0f8
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-c8e7-731e-b0f8.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-c8e7-731e-b0f8
- Upstream
- Withdrawn
- 2026-07-15T22:42:27Z
- Published
- 2026-07-02T20:24:33Z
- Modified
- 2026-09-15T03:33:46Z
- Summary
- Vulnerability is in libheif's HEIF sequence parser (Track::init_sample_timing_table / Track::load in libheif/sequences/track.cc). This sequence / ISOBMFF track parsing was added in v1.20.0; v1.19.8 — the version we ship — has no sequences/ directory and no init_sample_timing_table (verified: no such file or symbol in the v1.19.8 source), so the vulnerable code is not present.
- Details
- References