CVE-2023-29659: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.

Affected products

• Fedoraproject Fedora: version 36 only; version 37 only
• Struktur Libheif: version 1.15.1 only

Published 2023-05-05. Last modified 2026-06-17.