Packages / Debian 13 (Trixie) / graphics / heif-gdk-pixbuf

Package: heif-gdk-pixbuf (1.23.6-2~deb13u1)

Decodificador y codificador de los formatos de archivo HEIF y AVIF - cargador gdk-pixbuf

Other Packages Related to heif-gdk-pixbuf:

dep: [libheif1] (= 1.23.6-2~deb13u1)
Decodificador y codificador del formato de archivo HEIF y AVIF - biblioteca compartida
dep: [libc6] (>= 2.4)
GNU C Library: Shared libraries
dep: [libgdk-pixbuf-2.0-0] (>= 2.22.0)
Biblioteca GDK Pixbuf
dep: [libglib2.0-0t64] (>= 2.12.0)
GLib library of C routines

Download heif-gdk-pixbuf

Architecture	Package size	Installed size	Files	Package
amd64	13 KiB	44 KiB	list of files	Download
arm64	11 KiB	92 KiB	list of files	Download

Rutas de archivos del paquete (4)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/lib/aarch64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-heif.so
/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-heif.so
/usr/share/doc/heif-gdk-pixbuf/changelog.Debian.gz
/usr/share/doc/heif-gdk-pixbuf/copyright

Field source: Debian Security

Usar este paquete

OpenFactory puede arrancar este sistema operativo en una máquina virtual del navegador, o iniciar una construcción que incluye el nombre nativo del paquete de este registro.

Probar Debian 13 (Trixie) en el navegador Construir una imagen que incluye heif-gdk-pixbuf

Versiones, suites y repositorios

Cada fila es metadato del índice de paquetes para una versión, arquitectura, suite y repositorio. Nombres, URL y tamaños vienen de la fuente; un enlace es un punto de descarga que puede cambiar, no una redistribución de OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1.23.6-2~deb13u1	trixie-security / main	amd64	Debian 13 security · main · amd64	13 KiB	44 KiB	pool/updates/main/libh/libheif/heif-gdk-pixbuf_1.23.6-2~deb13u1_amd64.deb
1.19.8-1+deb13u1	trixie-security / main	arm64	Debian 13 security · main · arm64	11 KiB	92 KiB	pool/updates/main/libh/libheif/heif-gdk-pixbuf_1.19.8-1+deb13u1_arm64.deb
1.23.4-1~deb13u1 (withdrawn)	trixie-security / main	amd64	Debian 13 security · main · amd64	13 KiB	43 KiB	pool/updates/main/libh/libheif/heif-gdk-pixbuf_1.23.4-1~deb13u1_amd64.deb
1.19.8-1+deb13u1 (withdrawn)	trixie-security / main	amd64	Debian 13 security · main · amd64	11 KiB	41 KiB	pool/updates/main/libh/libheif/heif-gdk-pixbuf_1.19.8-1+deb13u1_amd64.deb

Field source: Debian Security

Vulnerabilidades conocidas

La asociación de paquetes está en curso.

CVE	Gravedad	Impacto por versión
[CVE-2026-84449] Published: Sep 18, 2026, 4:03:28 PM UTC libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace() stores image-plane strides in an integer width that can overflow for extremely l	High(7.5)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.1.0-2ubuntu0.1~esm5, 1.12.0-2ubuntu0.1~esm5, 1.17.6-1ubuntu4.9, 1.19.7-1, 1.21.2-3ubuntu0.6, 1.6.1-1ubuntu0.1~esm5` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.1.0-2ubuntu0.1~esm5, 1.12.0-2ubuntu0.1~esm5, 1.17.6-1ubuntu4.9, 1.19.7-1, 1.21.2-3ubuntu0.6, 1.6.1-1ubuntu0.1~esm5` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.1.0-2ubuntu0.1~esm5, 1.12.0-2ubuntu0.1~esm5, 1.17.6-1ubuntu4.9, 1.19.7-1, 1.21.2-3ubuntu0.6, 1.6.1-1ubuntu0.1~esm5` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.1.0-2ubuntu0.1~esm5, 1.12.0-2ubuntu0.1~esm5, 1.17.6-1ubuntu4.9, 1.19.7-1, 1.21.2-3ubuntu0.6, 1.6.1-1ubuntu0.1~esm5` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-84384] Published: Sep 8, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompress_brotli() and do_inflate() to grow accu	High(7.5)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-84444] Published: Sep 8, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, heif_context_add_image_tile() accepts an independently constructed tile whose comp	High(8.1)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-84446] Published: Sep 8, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list data can make Track::init_sample_timing_table() compute a logical m_num_output_s	High(7.5)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-84447] Published: Sep 8, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processed_ids is copi	High(7.5)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-84448] Published: Sep 8, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inline_mask_data() function in libheif/api/libheif/heif_regions.cc accepts mask_data	High(7.5)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.2-1, 1.23.4-1~deb13u1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-84383] Published: Sep 4, 2026, 12:00:00 AM UTC libheif: CVE-2026-84383	Critical(9.8)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.2-1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.2-1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.2-1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 14
[CVE-2026-84450] Published: Sep 4, 2026, 12:00:00 AM UTC libheif: CVE-2026-84450	High(7.5)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.3-1, 1.23.4-1~deb13u1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.3-1, 1.23.4-1~deb13u1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.3-1, 1.23.4-1~deb13u1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.3-1, 1.23.4-1~deb13u1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-84451] Published: Sep 4, 2026, 12:00:00 AM UTC libheif: CVE-2026-84451	High(7.5)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.3-1, 1.23.4-1~deb13u1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.3-1, 1.23.4-1~deb13u1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.3-1, 1.23.4-1~deb13u1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.3-1, 1.23.4-1~deb13u1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-62289] Published: Aug 1, 2026, 12:00:00 AM UTC libheif vulnerabilities	High(8.7)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown usn · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown usn · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown usn · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown usn · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-62291] Published: Aug 1, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause attacker-controlled h	High(8.7)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 14
[CVE-2026-62292] Published: Aug 1, 2026, 12:00:00 AM UTC libheif vulnerabilities	High(8.7)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown usn · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown usn · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown usn · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown usn · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-62377] Published: Aug 1, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heif_context_read_from_memory() can leave the context with no registered sequence	Medium(6.5)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 14
[CVE-2026-49271] Published: Jun 9, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompressed HEIF decoder validates explicit icef compressed-unit offsets using unit_offset + unit_size. Becaus	Medium(6.5)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-50142] Published: Jun 9, 2026, 12:00:00 AM UTC libheif: CVE-2026-50142	High(7.5)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.1-1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.1-1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.1-1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.1-1` Version impact unknown dsa · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 14
[CVE-2026-47178] Published: May 28, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file (uncompressed `unci` codec, tiled, component-interleaved, 4:2:0) triggers a heap out-	High(8.4)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-47247] Published: May 28, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker w	High(7.5)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14
[CVE-2026-47251] Published: May 28, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8b5`, PR #1712) introduced an integer overflow in the very security check it added. The check itself	Medium(6.8)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido Version impact unknown nvd · libheif · debian · bookworm `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido Version impact unknown nvd · libheif · debian · bookworm `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido Version impact unknown nvd · libheif · debian · bookworm `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido Version impact unknown nvd · libheif · debian · bookworm
[CVE-2026-47254] Published: May 28, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, `Track::init_sample_timing_table()` in `libheif/sequences/track.cc` stores an out-of-bounds chunk index (`m_chunks.	Medium(6.8)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 14
[CVE-2026-47709] Published: May 28, 2026, 12:00:00 AM UTC libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API `heif_image_handle_get_image_tiling()` when a malformed uncompressed HEIF image item ha	Medium(6.9)	Desconocido Detalles (4) `1.19.8-1+deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.19.8-1+deb13u1` · arm64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.4-1~deb13u1` · amd64 · trixie-security · Historical version Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14 `1.23.6-2~deb13u1` · amd64 · trixie-security Desconocido · Corregida: `1.19.8-1+deb13u1, 1.23.1-1` Version impact unknown nvd · libheif · debian · bookworm; pypi · libheif · debian · 12; pypi · libheif · debian · 13; pypi · libheif · debian · 14

[Más resultados]

Última sincronización: Oct 29, 2026, 12:48:17 PM UTC

[Catálogo de CVE]

Sumas de comprobación

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.23.6-2~deb13u1 / amd64Observado Oct 24, 2026 – Oct 29, 2026sha256 4d4793aa89ac…e2501861Resumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): 4d4793aa89ac799493fd016a211bd3336fc3cf7cd5e36dbddd0fdce6e2501861

Verificar descarga

printf '%s  %s\n' '4d4793aa89ac799493fd016a211bd3336fc3cf7cd5e36dbddd0fdce6e2501861' 'heif-gdk-pixbuf_1.23.6-2~deb13u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

1.19.8-1+deb13u1 / arm64Observado Sep 1, 2026sha256 6a07617fde82…8ea87b9bResumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): 6a07617fde822e0aa284b5b25a5a88289671c770a6f42010e4be111c8ea87b9b

Verificar descarga

printf '%s  %s\n' '6a07617fde822e0aa284b5b25a5a88289671c770a6f42010e4be111c8ea87b9b' 'heif-gdk-pixbuf_1.19.8-1+deb13u1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

1.23.4-1~deb13u1 / amd64Observado Sep 28, 2026 – Oct 24, 2026sha256 2e8fdf127b33…ca0cab9cResumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): 2e8fdf127b33dc40cf649a19f2dbeddeaaeef415af2b7da2ca043a7aca0cab9c

Verificar descarga

printf '%s  %s\n' '2e8fdf127b33dc40cf649a19f2dbeddeaaeef415af2b7da2ca043a7aca0cab9c' 'heif-gdk-pixbuf_1.23.4-1~deb13u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

1.19.8-1+deb13u1 / amd64Observado Aug 10, 2026 – Sep 27, 2026sha256 626aeaf305d9…89e5f0ebResumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): 626aeaf305d92f144e82d1a701981f0cbcadfb35a2f4a788c398fe8289e5f0eb

Verificar descarga

printf '%s  %s\n' '626aeaf305d92f144e82d1a701981f0cbcadfb35a2f4a788c398fe8289e5f0eb' 'heif-gdk-pixbuf_1.19.8-1+deb13u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

Fuentes

Debian 13 (Trixie) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result
match verified
Debian 13 (Trixie) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Observed SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Result
match verified
Debian 13 (Trixie) security main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/trixie-security/InRelease
Signed-object SHA-256
fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
Signer fingerprint
B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Observed SHA-256
a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Result
match verified
Debian SecurityOct 29, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
trixie-security-main-amd64:00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/trixie-security/InRelease
Signed-object SHA-256
83418b3b53f7e635f6f7b43f15bb1fc89e3b5fd62df5d8db73c7160923d0ffcd
Signer fingerprint
B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Oct 29, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d
Observed SHA-256
00b130f61091f3df9d3654225afb2cf21447e3fdecdbead0f367f0e6348d4b1d
Result
match verified
Debian SecuritySep 27, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
trixie-security-main-amd64:2c3bce513b5998a43c6a8610f4794e8ff2d0eec1ba04dbe4aec64dcecaf9b7ea
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/trixie-security/InRelease
Signed-object SHA-256
974badfa038d7d59e94f553381fd4c661ca7f9417540e27b44494f051e039197
Signer fingerprint
B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 28, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
2c3bce513b5998a43c6a8610f4794e8ff2d0eec1ba04dbe4aec64dcecaf9b7ea
Observed SHA-256
2c3bce513b5998a43c6a8610f4794e8ff2d0eec1ba04dbe4aec64dcecaf9b7ea
Result
match verified
Debian SecurityOct 24, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
trixie-security-main-amd64:80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/trixie-security/InRelease
Signed-object SHA-256
2dc86861c04386d3c511340d4f011a37acfd1cccdf3dbd3e054d6fe8e4118ebc
Signer fingerprint
B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Oct 24, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
Observed SHA-256
80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
Result
match verified