CVE-2023-49464

Name of the Vulnerable Software and Affected Versions libheif version 1.17.5

Description The issue is related to a segmentation violation in the UncompressedImageCodec::get luma bits per pixel from configuration unci() function of the libheif decoder and encoder. This could allow a remote attacker to cause a denial of service.

Recommendations For libheif version 1.17.5, consider disabling the UncompressedImageCodec::get luma bits per pixel from configuration unci() function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.