CVE-2020-19499

Name of the Vulnerable Software and Affected Versions libheif version 1.4.0

Description The issue is related to an invalid memory read in the heif::Box iref::get references function, which can cause a Denial of Service or potentially other unspecified impact. It is also associated with a buffer data boundary read, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For libheif version 1.4.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.