Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2019-11471

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images.

Related bugs and status

CVE-2019-11471 (Candidate) is related to these bugs:

Bug #1827442: [MIR] libheif

		In	Importance	Status
1827442	[MIR] libheif	libheif (Ubuntu)	Undecided	Fix Released
1827442	[MIR] libheif	x265 (Ubuntu)	Undecided	Invalid
1827442	[MIR] libheif	libde265 (Ubuntu)	Undecided	Invalid
1827442	[MIR] libheif	aom (Ubuntu)	Undecided	Invalid
1827442	[MIR] libheif	dav1d (Ubuntu)	Undecided	Invalid

See the

CVE page on Mitre.org for more details.

References

MISC: https://github.com/str...
MISC: https://github.com/str...