VDB

CVE-2025-43966

CVE-2025-43966 PUBLISHED CVSS 2.9000000953674316 LOW

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.

EPSS 0.30% · 22.4th percentile

Risk Scores

CVSS 3.1
2.9000000953674316
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.30%
22.4th percentile

Affected Products

VendorProductVersions
strukturlibheif0, 0, 0

Timeline

  • Apr 20, 2025 CVE Published
  • Apr 21, 2025 EPSS Score
  • Apr 21, 2025 CVE Updated
  • Apr 21, 2025 PoC Published
  • May 3, 2025 EPSS Score
  • May 4, 2025 Coalition ESS Score
  • May 8, 2025 Coalition ESS Score
  • May 16, 2025 EPSS Score
  • May 28, 2025 EPSS Score
  • Jun 10, 2025 EPSS Score
  • Jun 22, 2025 EPSS Score
  • Jul 4, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›