OSV-2023-1129

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libheif/OSV-2023-1129.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-1129
Published
2023-11-09T13:00:44Z
Modified
2026-10-26T15:00:02Z
Summary
UNKNOWN READ in HeifPixelImage::overlay
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63990

Crash type: UNKNOWN READ
Crash state:
HeifPixelImage::overlay
HeifContext::decode_overlay_image
HeifContext::decode_image_planar
References

Affected packages

OSS-Fuzz / libheif

Package

Name
libheif
Purl
pkg:generic/libheif

Affected ranges

Type
GIT
Repo
https://github.com/strukturag/libheif.git
Events

Affected versions

v1.*
v1.16.2
v1.17.0
v1.17.1
v1.17.2
v1.17.3
v1.17.4
v1.17.5
v1.17.6
v1.18.0
v1.18.0-rc1
v1.18.1
v1.18.2
v1.19.0
v1.19.1
v1.19.2
v1.19.3
v1.19.4
v1.19.5
v1.19.6
v1.19.7
v1.19.8
v1.20.0
v1.20.1
v1.20.2
v1.21.0
v1.21.1
v1.21.2
v1.22.0
v1.22.1
v1.22.2
v1.23.0
v1.23.1
v1.23.2
v1.23.3
v1.23.4
v1.23.5
v1.23.6
v1.23.7

Ecosystem specific

{
    "severity":  "MEDIUM"
}

Database specific

source
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libheif/OSV-2023-1129.yaml"