CVE-2023-49464: Struktur Libheif

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::get_luma_bits_per_pixel_from_configuration_unci.

Affected products

• Struktur Libheif: version 1.17.5 only

Published 2023-12-07. Last modified 2026-06-17.