CVE-2019-11471

Name of the Vulnerable Software and Affected Versions libheif version 1.4.0

Description The issue is related to a use-after-free error in the heif::HeifContext::Image::set alpha channel function, located in heif context.h, due to mishandling of references to non-existing alpha images in heif context.cc.

Recommendations For libheif version 1.4.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.