libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service attack.
{ "availability": "No subscription required", "ubuntu_priority": "negligible", "binaries": [ { "binary_version": "1.18.1-2", "binary_name": "heif-gdk-pixbuf" }, { "binary_version": "1.18.1-2", "binary_name": "heif-gdk-pixbuf-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "heif-thumbnailer" }, { "binary_version": "1.18.1-2", "binary_name": "heif-thumbnailer-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-dev" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-examples" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-examples-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-aomdec" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-aomdec-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-aomenc" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-aomenc-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-dav1d" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-dav1d-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-ffmpegdec" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-ffmpegdec-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-j2kdec" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-j2kdec-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-j2kenc" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-j2kenc-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-jpegdec" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-jpegdec-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-jpegenc" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-jpegenc-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-kvazaar" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-kvazaar-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-libde265" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-libde265-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-rav1e" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-rav1e-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-svtenc" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-svtenc-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-x265" }, { "binary_version": "1.18.1-2", "binary_name": "libheif-plugin-x265-dbgsym" }, { "binary_version": "1.18.1-2", "binary_name": "libheif1" }, { "binary_version": "1.18.1-2", "binary_name": "libheif1-dbgsym" } ], "priority_reason": "Memory leaks (failure to de-allocate memory) in example code." }
{ "availability": "No subscription required", "ubuntu_priority": "negligible", "binaries": [ { "binary_version": "1.19.7-1", "binary_name": "heif-gdk-pixbuf" }, { "binary_version": "1.19.7-1", "binary_name": "heif-gdk-pixbuf-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "heif-thumbnailer" }, { "binary_version": "1.19.7-1", "binary_name": "heif-thumbnailer-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-dev" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-examples" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-examples-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-aomdec" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-aomdec-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-aomenc" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-aomenc-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-dav1d" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-dav1d-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-ffmpegdec" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-ffmpegdec-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-j2kdec" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-j2kdec-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-j2kenc" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-j2kenc-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-jpegdec" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-jpegdec-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-jpegenc" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-jpegenc-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-kvazaar" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-kvazaar-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-libde265" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-libde265-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-rav1e" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-rav1e-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-svtenc" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-svtenc-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-x265" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugin-x265-dbgsym" }, { "binary_version": "1.19.7-1", "binary_name": "libheif-plugins-all" }, { "binary_version": "1.19.7-1", "binary_name": "libheif1" }, { "binary_version": "1.19.7-1", "binary_name": "libheif1-dbgsym" } ], "priority_reason": "Memory leaks (failure to de-allocate memory) in example code." }