MGASA-2024-0352

Source
https://advisories.mageia.org/MGASA-2024-0352.html
Import Source
https://advisories.mageia.org/MGASA-2024-0352.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2024-0352
Related
Published
2024-11-09T05:17:41Z
Modified
2024-11-09T05:37:23Z
Summary
Updated libheif packages fix security vulnerability
Details

In Libheif, insufficient checks in ImageOverlay::parse() while decoding a HEIF file containing an overlay image with forged offsets can lead to an out-of-bounds read and write. (CVE-2024-41311)

References
Credits

Affected packages