Packages / Alpine Linux 3.21 / libheif-dev

Package: libheif-dev (1.19.5-r0)

ISO/IEC 23008-12:2017 HEIF file format decoder and encoder (development files)

Other Packages Related to libheif-dev:

  • dep: [libde265-dev]

    Open h.265 video codec implementation (development files)

  • dep: [x265-dev]

    Open Source H265/HEVC video encoder (development files)

  • dep: [libheif] (= 1.19.5-r0)

    ISO/IEC 23008-12:2017 HEIF file format decoder and encoder

  • dep: pc:aom

    Package not available

  • dep: pc:libde265

    Package not available

  • dep: pc:libsharpyuv

    Package not available

  • dep: pc:x265

    Package not available

  • dep: pkgconfig

    Package not available

Download libheif-dev

ArchitecturePackage sizeInstalled sizeFilesPackage
aarch6445 KiB217 KiBlist of filesNot published
x86_6445 KiB217 KiBlist of filesNot published

Package-file coverage (not observed)

The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.

No package-associated file paths were observed for the displayed build metadata.

Field source: Alpine Linux 3.21 community aarch64

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1.19.5-r0v3.21 / communityaarch64Alpine Linux 3.21 · community · aarch6445 KiB217 KiBNot reported
1.19.5-r0v3.21 / communityx86_64Alpine Linux 3.21 · community · x86_6445 KiB217 KiBNot reported

Field source: Alpine Linux 3.21 community aarch64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-50142]

Published:

libheif: CVE-2026-50142

High(7.5)Unknown
Details (2)
  • 1.19.5-r0 · aarch64 · v3.21

    Unknown · Fixed: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unknown · Fixed: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2026-32740]

Published:

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write 6

High(8.8)Unknown
Details (2)
  • 1.19.5-r0 · aarch64 · v3.21

    Unknown · Fixed: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unknown · Fixed: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2026-32739]

Published:

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Box_stts::get_sample_duration(), consuming 10

Medium(6.5)Unknown
Details (2)
  • 1.19.5-r0 · aarch64 · v3.21

    Unknown · Fixed: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unknown · Fixed: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2026-32738]

Published:

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the stsc box causes an unsigned integer unde

Medium(6.5)Unknown
Details (2)
  • 1.19.5-r0 · aarch64 · v3.21

    Unknown · Fixed: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unknown · Fixed: 1.23.0-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2025-68431]

Published:

libheif vulnerabilities

High(7.3)Unknown
Details (2)
  • 1.19.5-r0 · aarch64 · v3.21

    Unknown · Fixed: 1.21.2-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unknown · Fixed: 1.21.2-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2023-49462]

Published:

libheif: CVE-2023-49462

High(7.5)Unknown
Details (2)
  • 1.19.5-r0 · aarch64 · v3.21

    Unknown · Fixed: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unknown · Fixed: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

[CVE-2023-49463]

Published:

libheif: CVE-2023-49463

High(7.5)Unknown
Details (2)
  • 1.19.5-r0 · aarch64 · v3.21

    Unknown · Fixed: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

  • 1.19.5-r0 · x86_64 · v3.21

    Unknown · Fixed: 1.17.6-r0

    Version impact unknown

    pypi · libheif · alpine · 3.23

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.19.5-r0 / aarch64Observed Sep 1, 2026apk-checksum Q19LyNOIVKcV…J8uLbVU=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q19LyNOIVKcVK2u22PWDaqJ8uLbVU=

Field source: Alpine Linux 3.21 community aarch64

1.19.5-r0 / x86_64Observed Sep 1, 2026apk-checksum Q1ZYcmk7v92L…Za9ggk8=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q1ZYcmk7v92LVugC5lt0T+Za9ggk8=

Field source: Alpine Linux 3.21 community x86_64

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    v3-21-community-aarch64:6d1639bb68111bc6380b811544def4ae1402cd2cfa7951198cfe3e436c16d7d4

    Repository-signature verification record
    Signed-object SHA-256
    279f8a6a83fc0feb444bebd893ca04cca06191038774aacfd1e7cd82c9ce7086
    Keyring revision
    alpine-aarch64
    SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
  • Authoritative source; repository metadata signature verified

    Signature evidence

    v3-21-community-x86-64:794508fb0cc85267c4bdac308aaabf05686b1e864a5e51a294e0a00f8eaf8409

    Repository-signature verification record
    Signed-object SHA-256
    7ef0a4300dff2958d96d72458a15ac39d41d7b8c54cdd093f4f42277790a3eb3
    Keyring revision
    alpine-x86_64
    SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026