Packages / Alpine Linux 3.23 / libheif-tools

Package: libheif-tools (1.23.0-r0)

ISO/IEC 23008-12:2017 HEIF file format decoder and encoder (tools)

Other Packages Related to libheif-tools:

dep: [heif-thumbnailer] (= 1.23.0-r0)
ISO/IEC 23008-12:2017 HEIF file format decoder and encoder (thumbnailer)
dep: so:libc.musl-aarch64.so.1
Package not available
dep: so:libgcc_s.so.1
Package not available
dep: so:libheif.so.1
Package not available
dep: so:libjpeg.so.8
Package not available
dep: so:libpng16.so.16
Package not available
dep: so:libstdc++.so.6
Package not available
dep: so:libtiff.so.6
Package not available
dep: so:libwebp.so.7
Package not available
dep: so:libwebpmux.so.3
Package not available

Download libheif-tools

Architecture	Package size	Installed size	Files	Package
aarch64	179 KiB	523 KiB	list of files	Not published
x86_64	189 KiB	455 KiB	list of files	Not published

Package-file coverage (not observed)

The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.

No package-associated file paths were observed for the displayed build metadata.

Field source: Alpine Linux 3.23 main aarch64

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1.23.0-r0	v3.23 / main	aarch64	Alpine Linux 3.23 · main · aarch64	179 KiB	523 KiB	Not reported
1.23.0-r0	v3.23 / main	x86_64	Alpine Linux 3.23 · main · x86_64	189 KiB	455 KiB	Not reported

Field source: Alpine Linux 3.23 main aarch64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-50142] Published: Jun 9, 2026, 12:00:00 AM UTC libheif: CVE-2026-50142	High(7.5)	Unknown Details (2) `1.23.0-r0` · aarch64 · v3.23 Unknown · Fixed: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Unknown · Fixed: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2026-32740] Published: May 19, 2026, 7:22:07 PM UTC libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write 6	High(8.8)	Unknown Details (2) `1.23.0-r0` · aarch64 · v3.23 Unknown · Fixed: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Unknown · Fixed: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2026-32739] Published: May 19, 2026, 7:10:03 PM UTC libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Box_stts::get_sample_duration(), consuming 10	Medium(6.5)	Unknown Details (2) `1.23.0-r0` · aarch64 · v3.23 Unknown · Fixed: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Unknown · Fixed: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2026-32738] Published: May 19, 2026, 7:03:48 PM UTC libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the stsc box causes an unsigned integer unde	Medium(6.5)	Unknown Details (2) `1.23.0-r0` · aarch64 · v3.23 Unknown · Fixed: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Unknown · Fixed: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2025-68431] Published: Dec 29, 2025, 7:09:54 PM UTC libheif vulnerabilities	High(7.3)	Unknown Details (2) `1.23.0-r0` · aarch64 · v3.23 Unknown · Fixed: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Unknown · Fixed: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2023-49462] Published: Nov 23, 2023, 12:00:00 AM UTC libheif: CVE-2023-49462	High(7.5)	Unknown Details (2) `1.23.0-r0` · aarch64 · v3.23 Unknown · Fixed: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Unknown · Fixed: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2023-49463] Published: Nov 23, 2023, 12:00:00 AM UTC libheif: CVE-2023-49463	High(7.5)	Unknown Details (2) `1.23.0-r0` · aarch64 · v3.23 Unknown · Fixed: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Unknown · Fixed: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23

Last synced: Nov 1, 2026, 4:58:57 AM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.23.0-r0 / aarch64Observed Sep 1, 2026apk-checksum Q1bTTyzoL6YI…dxyMwdo=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q1bTTyzoL6YIdVyqcFZJxPdxyMwdo=

Field source: Alpine Linux 3.23 main aarch64

1.23.0-r0 / x86_64Observed Sep 1, 2026apk-checksum Q1MK7u9AkhJh…Wf4xYIM=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q1MK7u9AkhJhOYHdkIW0rpWf4xYIM=

Field source: Alpine Linux 3.23 main x86_64

Sources

Alpine Linux 3.23 main aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
v3-23-main-aarch64:3c193cdb4a3ae8c5a08d7ef5282971be76249c13d1db367323e06212ec30d230
Repository-signature verification record
Signed-object SHA-256
f399e7803b7b52f81a6307739a8951c6edcdbf54e825d0d34c309a2cd305569d
Keyring revision
alpine-aarch64
SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Alpine Linux 3.23 main x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
v3-23-main-x86-64:aecb4d45d58b2e08e09c841a9132ab6f77239d8117232bea8385b33090e25fbb
Repository-signature verification record
Signed-object SHA-256
eae8fa0146127c33cd9a723915001f535277687349397f0d34f313638e33fc18
Keyring revision
alpine-x86_64
SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026