VDB

GCVE-110-MAGEIA-2019-290

GCVE-110-MAGEIA-2019-290
Advisory Published
Vulnetix · Advisory published September 27, 2019
libheif 1.4.0 has a use-after-free in heif::HeifContext::Image:: set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images (CVE-2019-11471). Also, imagemagick has been updated to 7.0.8.62 to fix various bugs.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiaimagemagick0 (affected), 7.0.8.62-1.mga7 (unaffected), 7.0.8.62-1.mga7.tainted (unaffected), 0 (affected)—
Mageialibheif0 (affected), 1.4.1-1.mga7.tainted (unaffected)—

Aliases

CVE-2019-11471

References

Updated libheif packages fix security vulnerability
fix
Updated libheif packages fix security vulnerability
advisory
Updated libheif packages fix security vulnerability
issue
Updated libheif packages fix security vulnerability
issue

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›