openRuyi Lookout
← Packages

libheif

cmakeAdvisory 2

HEIF and AVIF file format decoder and encoder

Current
1.23.6
Candidate
1.23.7Stale
License
LGPL-3.0-or-later and MIT

Build

TargetResultLast successful versionSucceeded at
rva23
1.23.6
rva20
1.23.6
x86_64
1.23.6

Advisory · 2

Query ecosystem
GITOSV
Query name
https://github.com/strukturag/libheifOSV
Query version
v1.23.6OSV

Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.

  • OSV-2020-2308
    OSV
    Summary
    Heap-buffer-overflow in derive_collocated_motion_vectorsOSV
    Fixed events
    —OSV
    Aliases
    —OSV
    EPSS (no CVE alias)
    not applicableFIRST
    KEV (no CVE alias)
    not applicableCISA
  • OSV-2023-1129
    OSV
    Summary
    UNKNOWN READ in HeifPixelImage::overlayOSV
    Fixed events
    —OSV
    Aliases
    —OSV
    EPSS (no CVE alias)
    not applicableFIRST
    KEV (no CVE alias)
    not applicableCISA

Description

libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF (AV1 Image File Format) file format decoder and encoder.

Changelog

PR · 3

Checks
MonitorObservationLast checked
Source
Stale
Repository refresh: git fetch exited 128 (authentication)
Version
Stale
Source last confirmed at 2026-11-10T17:23:44+00:00; repository refresh overdue.
Build
Checked
GitHub
Checked
EOL
Not configured
No reliable monitor identity/configuration.
—
LicenseDiff
Not configured
No reliable monitor identity/configuration.
—
Dependencies
Not configured
No reliable monitor identity/configuration.
—
Advisory
Checked
Repository query; subpackage and local-patch applicability are not evaluated.
Yanked
Not configured
No reliable monitor identity/configuration.
—