CVE-2025-29482: Struktur Libheif

Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO (Sample Adaptive Offset) processing of libde265.

Affected products

• Struktur Libheif: version 1.19.7 only

Published 2025-04-07. Last modified 2026-06-17.