VDB

CVE-2025-43966

CVE-2025-43966 PUBLISHED CVSS 2.9000000953674316 LOW

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.

EPSS 0.14% · 34.4th percentile

Risk Scores

CVSS v3.1
2.9000000953674316
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.14%
34.4th percentile

Affected Products

VendorProductVersions
strukturlibheif0, 0, 0

Timeline

  • Apr 20, 2025 CVE Published
  • Apr 21, 2025 EPSS Score
  • Apr 21, 2025 CVE Updated
  • Apr 21, 2025 PoC Published
  • May 3, 2025 EPSS Score
  • May 4, 2025 Coalition ESS Score
  • May 8, 2025 Coalition ESS Score
  • May 15, 2025 EPSS Score
  • May 28, 2025 EPSS Score
  • Jun 9, 2025 EPSS Score
  • Jun 21, 2025 EPSS Score
  • Jul 3, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›