Package: libheif-tools (1.19.5-r0) ISO/IEC 23008-12:2017 HEIF file format decoder and encoder (tools) Other Packages Related to libheif-tools: [heif-thumbnailer ] (= 1.19.5-r0)
ISO/IEC 23008-12:2017 HEIF file format decoder and encoder (thumbnailer)
Package not available
Package not available
Package not available
Package not available
Package not available
Package not available
Package not available
Download libheif-tools Architecture Package size Installed size Files Package aarch64 122 KiB 329 KiB Not published x86_64 129 KiB 322 KiB Not published
Package-file coverage (not observed) The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.
No package-associated file paths were observed for the displayed build metadata.
Field source: Alpine Linux 3.21 community aarch64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Version Release Architecture Repository Package size Installed size Publisher repository artifact 1.19.5-r0 v3.21 / community aarch64 Alpine Linux 3.21 · community · aarch64 122 KiB 329 KiB Not reported 1.19.5-r0 v3.21 / community x86_64 Alpine Linux 3.21 · community · x86_64 129 KiB 322 KiB Not reported
Field source: Alpine Linux 3.21 community aarch64
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-50142 ] Published: Jun 9, 2026, 12:00:00 AM UTC
libheif: CVE-2026-50142
High(7.5) Unknown Details (2) 1.19.5-r0 · aarch64 · v3.21
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.19.5-r0 · x86_64 · v3.21
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2026-32740 ] Published: May 19, 2026, 7:22:07 PM UTC
libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write 6
High(8.8) Unknown Details (2) 1.19.5-r0 · aarch64 · v3.21
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.19.5-r0 · x86_64 · v3.21
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2026-32739 ] Published: May 19, 2026, 7:10:03 PM UTC
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Box_stts::get_sample_duration(), consuming 10
Medium(6.5) Unknown Details (2) 1.19.5-r0 · aarch64 · v3.21
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.19.5-r0 · x86_64 · v3.21
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2026-32738 ] Published: May 19, 2026, 7:03:48 PM UTC
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the stsc box causes an unsigned integer unde
Medium(6.5) Unknown Details (2) 1.19.5-r0 · aarch64 · v3.21
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.19.5-r0 · x86_64 · v3.21
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2025-68431 ] Published: Dec 29, 2025, 7:09:54 PM UTC
libheif vulnerabilities
High(7.3) Unknown Details (2) 1.19.5-r0 · aarch64 · v3.21
Unknown · Fixed: 1.21.2-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.19.5-r0 · x86_64 · v3.21
Unknown · Fixed: 1.21.2-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2023-49462 ] Published: Nov 23, 2023, 12:00:00 AM UTC
libheif: CVE-2023-49462
High(7.5) Unknown Details (2) 1.19.5-r0 · aarch64 · v3.21
Unknown · Fixed: 1.17.6-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.19.5-r0 · x86_64 · v3.21
Unknown · Fixed: 1.17.6-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2023-49463 ] Published: Nov 23, 2023, 12:00:00 AM UTC
libheif: CVE-2023-49463
High(7.5) Unknown Details (2) 1.19.5-r0 · aarch64 · v3.21
Unknown · Fixed: 1.17.6-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.19.5-r0 · x86_64 · v3.21
Unknown · Fixed: 1.17.6-r0
Version impact unknown
pypi · libheif · alpine · 3.23
Last synced: Nov 2, 2026, 8:17:00 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
1.19.5-r0 / aarch64 Observed Sep 1, 2026 apk-checksum Q1bN9zWgWzK1…JoBcswA=Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (apk-checksum): Q1bN9zWgWzK16audvg9HNyJoBcswA=
Field source: Alpine Linux 3.21 community aarch64
1.19.5-r0 / x86_64 Observed Sep 1, 2026 apk-checksum Q1z0s5vEyN6n…Ybi3Fjs=Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (apk-checksum): Q1z0s5vEyN6nWJlYKrdNMdYbi3Fjs=
Field source: Alpine Linux 3.21 community x86_64
