struktur libheif

Name: struktur libheif
Brand: struktur

productUS

cpe:2.3:a:struktur:libheif:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical15high4medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-32740US	—	0.68% (52nd)	Exploit	1.22.0	2026-05-19	< 1.22.0
CVE-2019-11471US	high8.8	1.84% (79th)	—	no fix	2019-04-23	= 1.4.0
CVE-2020-19499US	high8.8	1.37% (72nd)	—	no fix	2021-07-21	= 1.4.0
CVE-2020-19498US	high8.8	1.37% (72nd)	—	no fix	2021-07-21	= 1.4.0
CVE-2020-23109US	high8.1	1.34% (71st)	—	no fix	2021-11-03	= 1.6.2
CVE-2023-29659US	medium6.5	0.93% (60th)	—	no fix	2023-05-05	= 1.15.1
CVE-2023-49462US	high8.8	0.80% (57th)	—	no fix	2023-12-07	= 1.17.5
CVE-2024-41311US	high8.1	0.77% (56th)	—	no fix	2024-10-15	= 1.17.6
CVE-2023-49463US	high8.8	0.77% (55th)	—	no fix	2023-12-07	= 1.17.5
CVE-2023-49464US	high8.8	0.76% (55th)	—	no fix	2023-12-07	= 1.17.5
CVE-2023-49460US	high8.8	0.76% (55th)	—	no fix	2023-12-07	= 1.17.5
CVE-2024-25269US	—	0.69% (53rd)	—	no fix	2024-03-05	≤ 1.17.6
CVE-2026-47247US	—	0.48% (41st)	—	1.22.0	2026-07-21	< 1.22.0
CVE-2025-43967US	high7.5	0.44% (38th)	—	1.19.6	2025-04-21	< 1.19.6
CVE-2025-68431US	high7.1	0.43% (37th)	—	1.21.0	2025-12-29	< 1.21.0
CVE-2026-48029US	—	0.36% (30th)	—	1.22.0	2026-07-22	1.19.0 → 1.22.0
CVE-2026-49271US	—	0.36% (29th)	—	1.22.1	2026-06-19	< 1.22.1
CVE-2026-32739US	—	0.32% (25th)	—	1.22.0	2026-05-19	< 1.22.0
CVE-2025-43966US	high7.5	0.32% (25th)	—	1.19.6	2025-04-21	< 1.19.6
CVE-2023-0996US	high7.8	0.31% (23rd)	—	no fix	2023-02-24	= 1.14.2
CVE-2026-41071US	high8.1	0.30% (23rd)	—	1.22.0	2026-05-22	< 1.22.0
CVE-2026-32738US	medium6.5	0.30% (23rd)	—	1.22.0	2026-05-19	< 1.22.0
CVE-2026-41069US	—	0.25% (17th)	—	1.22.0	2026-05-22	< 1.22.0
CVE-2025-29482US	—	0.24% (15th)	—	no fix	2025-04-07	= 1.19.7
CVE-2026-47178US	high7.8	0.18% (8th)	—	1.22.0	2026-07-21	1.19.0 → 1.22.0
CVE-2026-47709US	medium5.5	0.18% (8th)	—	1.22.0	2026-07-21	< 1.22.0
CVE-2026-47254US	—	0.16% (5th)	—	1.22.0	2026-07-21	< 1.22.0
CVE-2026-47251US	medium6.1	0.16% (5th)	—	1.22.0	2026-07-21	< 1.22.0
CVE-2026-47714US	—	0.15% (4th)	—	1.22.0	2026-07-21	< 1.22.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read10 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')7 CVEs
CWE-476NULL Pointer Dereference5 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-226Sensitive Information in Resource Not Removed Before Reuse1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan