VDB

CVE-2025-43966

CVE-2025-43966 PUBLISHED CVSS 2.9000000953674316 LOW

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.

EPSS 0.32% · 24.7th percentile

Risk Scores

CVSS 3.1
2.9000000953674316
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.32%
24.7th percentile

Affected Products

VendorProductVersions
strukturlibheif0

Timeline

  • Apr 20, 2025 CVE Published
  • Apr 21, 2025 EPSS Score
  • Apr 21, 2025 CVE Updated
  • Apr 21, 2025 PoC Published
  • May 4, 2025 EPSS Score
  • May 4, 2025 Coalition ESS Score
  • May 8, 2025 Coalition ESS Score
  • May 17, 2025 EPSS Score
  • May 30, 2025 EPSS Score
  • Jun 12, 2025 EPSS Score
  • Jun 25, 2025 EPSS Score
  • Jul 8, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›