Libheif 1.22.x < 1.23.2 Heap Buffer Overflow (macOS)

Language:

Version 1.5 Oct 6, 2026, 1:47 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202610061347
Version 1.4 Sep 21, 2026, 3:50 PM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202609211550
Version 1.3 Sep 18, 2026, 11:05 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202609182305
Version 1.2 Sep 18, 2026, 2:17 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202609181417
Version 1.1 Sep 17, 2026, 5:47 PM New Plugin Feed: 202609171747

* Changelogs are generally available for changes made after Nov 1, 2022