Package: libheif-dev (1.23.0-r0) ISO/IEC 23008-12:2017 HEIF file format decoder and encoder (development files) Other Packages Related to libheif-dev: [libde265-dev ]
Open h.265 video codec implementation (development files)
[x265-dev ]
Open Source H265/HEVC video encoder (development files)
[libheif ] (= 1.23.0-r0)
ISO/IEC 23008-12:2017 HEIF file format decoder and encoder
Package not available
Package not available
Package not available
Package not available
Package not available
Download libheif-dev Architecture Package size Installed size Files Package aarch64 70 KiB 328 KiB Not published x86_64 70 KiB 328 KiB Not published
Package-file coverage (not observed) The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.
No package-associated file paths were observed for the displayed build metadata.
Field source: Alpine Linux 3.23 main aarch64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Version Release Architecture Repository Package size Installed size Publisher repository artifact 1.23.0-r0 v3.23 / main aarch64 Alpine Linux 3.23 · main · aarch64 70 KiB 328 KiB Not reported 1.23.0-r0 v3.23 / main x86_64 Alpine Linux 3.23 · main · x86_64 70 KiB 328 KiB Not reported
Field source: Alpine Linux 3.23 main aarch64
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-50142 ] Published: Jun 9, 2026, 12:00:00 AM UTC
libheif: CVE-2026-50142
High(7.5) Unknown Details (2) 1.23.0-r0 · aarch64 · v3.23
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.23.0-r0 · x86_64 · v3.23
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2026-32740 ] Published: May 19, 2026, 7:22:07 PM UTC
libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write 6
High(8.8) Unknown Details (2) 1.23.0-r0 · aarch64 · v3.23
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.23.0-r0 · x86_64 · v3.23
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2026-32739 ] Published: May 19, 2026, 7:10:03 PM UTC
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Box_stts::get_sample_duration(), consuming 10
Medium(6.5) Unknown Details (2) 1.23.0-r0 · aarch64 · v3.23
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.23.0-r0 · x86_64 · v3.23
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2026-32738 ] Published: May 19, 2026, 7:03:48 PM UTC
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the stsc box causes an unsigned integer unde
Medium(6.5) Unknown Details (2) 1.23.0-r0 · aarch64 · v3.23
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.23.0-r0 · x86_64 · v3.23
Unknown · Fixed: 1.23.0-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2025-68431 ] Published: Dec 29, 2025, 7:09:54 PM UTC
libheif vulnerabilities
High(7.3) Unknown Details (2) 1.23.0-r0 · aarch64 · v3.23
Unknown · Fixed: 1.21.2-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.23.0-r0 · x86_64 · v3.23
Unknown · Fixed: 1.21.2-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2023-49462 ] Published: Nov 23, 2023, 12:00:00 AM UTC
libheif: CVE-2023-49462
High(7.5) Unknown Details (2) 1.23.0-r0 · aarch64 · v3.23
Unknown · Fixed: 1.17.6-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.23.0-r0 · x86_64 · v3.23
Unknown · Fixed: 1.17.6-r0
Version impact unknown
pypi · libheif · alpine · 3.23
[CVE-2023-49463 ] Published: Nov 23, 2023, 12:00:00 AM UTC
libheif: CVE-2023-49463
High(7.5) Unknown Details (2) 1.23.0-r0 · aarch64 · v3.23
Unknown · Fixed: 1.17.6-r0
Version impact unknown
pypi · libheif · alpine · 3.23
1.23.0-r0 · x86_64 · v3.23
Unknown · Fixed: 1.17.6-r0
Version impact unknown
pypi · libheif · alpine · 3.23
Last synced: Nov 2, 2026, 8:17:00 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
1.23.0-r0 / aarch64 Observed Sep 1, 2026 apk-checksum Q18/Al7gmc+d…VFYDayo=Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (apk-checksum): Q18/Al7gmc+dlgTXMPm7rHVFYDayo=
Field source: Alpine Linux 3.23 main aarch64
1.23.0-r0 / x86_64 Observed Sep 1, 2026 apk-checksum Q1D8T+TO06rh…2EIlmsA=Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (apk-checksum): Q1D8T+TO06rh4Ht3wyASUH2EIlmsA=
Field source: Alpine Linux 3.23 main x86_64
