954132 – (CVE-2025-43967) <media-libs/libheif-1.19.7: Multiple vulnerabilities

Bug 954132 (CVE-2025-43967) - <media-libs/libheif-1.19.7: Multiple vulnerabilities

Summary: <media-libs/libheif-1.19.7: Multiple vulnerabilities

Status:	CONFIRMED

Alias:	CVE-2025-43967

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal
Assignee:	Gentoo Security

URL:
Whiteboard:	B3 [noglsa cleanup]
Keywords:

Depends on:	943172 954133
Blocks:
	Show dependency tree

Reported:	2025-04-21 06:49 UTC by Sam James
Modified:	2025-04-23 17:40 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Sam James archtester

2025-04-21 06:49:13 UTC

Prompted by https://bugs.gentoo.org/953971#c3. I took a further look now and found some bits (didn't see anything in release notes so wasn't too worried yesterday).

--

* CVE-2025-43966

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.

* CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item.