ST
Vendor
strukturag
42
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84450 | LI libheif strukturag | 4.3 | Sep 18 | libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289) |
| CVE-2026-84449 | LI libheif strukturag | 3.7 | Sep 18 | libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV |
| CVE-2026-84451 | LI libheif strukturag | 6.5 | Sep 18 | libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read |
| CVE-2026-84447 | LI libheif strukturag | 7.5 | Sep 18 | libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS |
| CVE-2026-84384 | LI libheif strukturag | 7.5 | Sep 18 | libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS |
| CVE-2026-84444 | LI libheif strukturag | 7.4 | Sep 18 | libheif uncompressed tiled image encoding allows out-of-bounds write |
| CVE-2026-84383 | LI libheif strukturag | 9.8 | Sep 18 | libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items |
| CVE-2026-84446 | LI libheif strukturag | 7.5 | Sep 18 | libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames |
| CVE-2026-84448 | LI libheif strukturag | 4.0 | Sep 18 | libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image) |
| CVE-2026-54241 | LI libde265 strukturag | 7.4 | Sep 11 | libde265: SAO sequential filter heap buffer overflow via signed integer overflow |
| CVE-2026-54240 | LI libde265 strukturag | 7.4 | Sep 11 | libde265: Pixel accessor signed integer overflow causes heap OOB read/write |
| CVE-2026-62377 | LI libheif strukturag | 4.3 | Aug 18 | libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110) |
| CVE-2026-62291 | LI libheif strukturag | 5.3 | Aug 18 | libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions |
| CVE-2026-62292 | LI libheif strukturag | 8.7 | Aug 18 | libheif: Out-of-bounds read in uncompressed unci tile range slicing |
| CVE-2026-62289 | LI libheif strukturag | 4.3 | Aug 18 | libheif: Integer underflow in Fraction constructor via double clap transform application |
| CVE-2026-50142 | LI libheif strukturag | 7.5 | Aug 18 | libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check) |
| CVE-2026-48029 | LI libheif strukturag | 7.1 | Jul 22 | libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow |
| CVE-2026-47709 | LI libheif strukturag | 5.5 | Jul 21 | libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe |
| CVE-2026-47254 | LI libheif strukturag | 6.1 | Jul 21 | libheif Has Heap Buffer Overflow in `Track::get_next_sample_raw_data()` -- OOB Chunk Vector Access |
| CVE-2026-47251 | LI libheif strukturag | 6.1 | Jul 21 | libheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data2 |
| CVE-2026-47247 | LI libheif strukturag | 7.5 | Jul 21 | libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation |
| CVE-2026-47178 | LI libheif strukturag | 7.8 | Jul 21 | libheif has Heap Out Of Bounds Write in unci subsystem |
| CVE-2026-47714 | LI libheif strukturag | 6.1 | Jul 21 | libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation |
| CVE-2026-45383 | LI libde265 strukturag | 6.9 | Jul 21 | libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.18 |
| CVE-2026-45382 | LI libde265 strukturag | 6.9 | Jul 21 | libde265 has a heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry |
| CVE-2026-49346 | LI libde265 strukturag | 7.1 | Jun 19 | libde265 has a heap buffer overflow in de265_image_get_buffer via SPS dimension integer overflow |
| CVE-2026-49295 | LI libde265 strukturag | 7.1 | Jun 19 | libde265 has an out-of-bounds write in process_reference_picture_set via predicted short-term RPS |
| CVE-2026-49337 | LI libde265 strukturag | 4.3 | Jun 19 | libde265 has an unbounded memory leak via orphaned slice headers in `read_slice_NAL` |
| CVE-2026-49271 | LI libheif strukturag | 6.5 | Jun 19 | libheif: Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoder |
| CVE-2026-41071 | LI libheif strukturag | 8.1 | May 22 | libheif: Heap buffer over-read in SampleAuxInfoReader via crafted HEIF sequence file with mismatched saiz sample count |
| CVE-2026-41069 | LI libheif strukturag | 6.5 | May 22 | libheif allows Out-of-bounds vector access leading to invalid dereference (DoS) |
| CVE-2026-32882 | LI libheif strukturag | 7.1 | May 19 | libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride |
| CVE-2026-32741 | LI libheif strukturag | 7.1 | May 19 | libheif has a heap buffer overflow in decode_mask_image() |
| CVE-2026-32814 | LI libheif strukturag | 6.5 | May 19 | libheif: Uninitialized Heap Memory Information Leak via Failed Grid Tiles |
| CVE-2026-32740 | LI libheif strukturag | 8.8 | May 19 | libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing |
| CVE-2026-32739 | LI libheif strukturag | 6.5 | May 19 | libheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookup |
| CVE-2026-32738 | LI libheif strukturag | 6.5 | May 19 | libheif has a Heap OOB Read/SEGV Crash via Zero samples_per_chunk |
| CVE-2026-33164 | LI libde265 strukturag | 7.5 | Mar 20 | NULL Pointer Dereference in libde265 |
| CVE-2026-33165 | LI libde265 strukturag | 5.0 | Mar 20 | heap out-of-bounds write in libde265 1.0.16 |
| CVE-2026-3950 | LI libheif strukturag | 3.3 | Mar 11 | strukturag libheif stsz/stts track.cc load out-of-bounds |
| CVE-2026-3949 | LI libheif strukturag | 3.3 | Mar 11 | strukturag libheif HEIF File decoder_vvdec.cc vvdec_push_data2 out-of-bounds |
| CVE-2025-68431 | LI libheif strukturag | 7.1 | Dec 29 | libheif has Potential Heap Buffer Over-Read |
