Packages / Alpine Linux 3.23 / Source / libheif

Source Package: libheif (1.23.0-r0)

ISO/IEC 23008-12:2017 HEIF file format decoder and encoder

The following binary packages are built from this source package:

libheif
ISO/IEC 23008-12:2017 HEIF file format decoder and encoder
heif-thumbnailer
ISO/IEC 23008-12:2017 HEIF file format decoder and encoder (thumbnailer)
libheif-dev
ISO/IEC 23008-12:2017 HEIF file format decoder and encoder (development files)
libheif-doc
ISO/IEC 23008-12:2017 HEIF file format decoder and encoder (documentation)
libheif-pixbuf-loader
ISO/IEC 23008-12:2017 HEIF file format decoder and encoder (pixbuf loader)
libheif-tools
ISO/IEC 23008-12:2017 HEIF file format decoder and encoder (tools)

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-50142] Published: Jun 9, 2026, 12:00:00 AM UTC libheif: CVE-2026-50142	High(7.5)	Sconosciuto Dettagli (12) `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2026-32740] Published: May 19, 2026, 7:22:07 PM UTC libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write 6	High(8.8)	Sconosciuto Dettagli (12) `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2026-32739] Published: May 19, 2026, 7:10:03 PM UTC libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Box_stts::get_sample_duration(), consuming 10	Medium(6.5)	Sconosciuto Dettagli (12) `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2026-32738] Published: May 19, 2026, 7:03:48 PM UTC libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the stsc box causes an unsigned integer unde	Medium(6.5)	Sconosciuto Dettagli (12) `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.23.0-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2025-68431] Published: Dec 29, 2025, 7:09:54 PM UTC libheif vulnerabilities	High(7.3)	Sconosciuto Dettagli (12) `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.21.2-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2023-49462] Published: Nov 23, 2023, 12:00:00 AM UTC libheif: CVE-2023-49462	High(7.5)	Sconosciuto Dettagli (12) `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23
[CVE-2023-49463] Published: Nov 23, 2023, 12:00:00 AM UTC libheif: CVE-2023-49463	High(7.5)	Sconosciuto Dettagli (12) `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · aarch64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23 `1.23.0-r0` · x86_64 · v3.23 Sconosciuto · Corretta: `1.17.6-r0` Version impact unknown pypi · libheif · alpine · 3.23

Ultima sincronizzazione: Nov 1, 2026, 4:04:57 AM UTC

[Catalogo CVE]

Fonti

Alpine Linux 3.23 main aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
v3-23-main-aarch64:3c193cdb4a3ae8c5a08d7ef5282971be76249c13d1db367323e06212ec30d230
Repository-signature verification record
Signed-object SHA-256
f399e7803b7b52f81a6307739a8951c6edcdbf54e825d0d34c309a2cd305569d
Keyring revision
alpine-aarch64
SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Alpine Linux 3.23 main x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
v3-23-main-x86-64:aecb4d45d58b2e08e09c841a9132ab6f77239d8117232bea8385b33090e25fbb
Repository-signature verification record
Signed-object SHA-256
eae8fa0146127c33cd9a723915001f535277687349397f0d34f313638e33fc18
Keyring revision
alpine-x86_64
SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026