Vulnetix
Try Vulnetix Request Demo
CVE-2024-41311 PUBLISHED CVSS 8.100000381469727 HIGH

In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.

EPSS 0.17% · 38.0th percentile

Risk Scores

CVSS v3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS Score
0.17%
38.0th percentile

Affected Products

VendorProductVersions
strukturlibheif1.17.6
debiandebian_linux11.0
strukturlibheif1.17.6
n/an/an/a

Timeline

References

Open in Interactive Console →