USN-6847-1

Dashboard / Vulnerabilities / USN-6847-1

USN-6847-1

Summary: libheif vulnerabilities

Details: It was discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash the program, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-11471) Reza Mirzazade Farkhani discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash the program, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-23109) Eugene Lim discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash the program, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-0996) Min Jang discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash the program, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-29659) Yuchuan Meng discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash the program, resulting in a denial of service. This issue only affected Ubuntu 23.10. (CVE-2023-49460, CVE-2023-49462, CVE-2023-49463, CVE-2023-49464)

References: https://ubuntu.com/security/notices/USN-6847-1, https://ubuntu.com/security/CVE-2019-11471, https://ubuntu.com/security/CVE-2020-23109, https://ubuntu.com/security/CVE-2023-0996, https://ubuntu.com/security/CVE-2023-29659, https://ubuntu.com/security/CVE-2023-49460, https://ubuntu.com/security/CVE-2023-49462, https://ubuntu.com/security/CVE-2023-49463, https://ubuntu.com/security/CVE-2023-49464