OPENSUSE-SU-2026:10878-1
Vulnerability from csaf_opensuse - Published: 2026-05-28 00:00 - Updated: 2026-09-17 17:06Summary
gdk-pixbuf-loader-libheif-1.22.2-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: gdk-pixbuf-loader-libheif-1.22.2-1.1 on GA media
Description of the patch: These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.22.2-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-10878
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.5 (Medium)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
8.4 (High)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
important
6.2 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
6.2 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-32738
Threats
Impact
moderate
References
50 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "gdk-pixbuf-loader-libheif-1.22.2-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.22.2-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-10878",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10878-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-32738 page",
"url": "https://www.suse.com/security/cve/CVE-2026-32738/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-32739 page",
"url": "https://www.suse.com/security/cve/CVE-2026-32739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-32740 page",
"url": "https://www.suse.com/security/cve/CVE-2026-32740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-32741 page",
"url": "https://www.suse.com/security/cve/CVE-2026-32741/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-32814 page",
"url": "https://www.suse.com/security/cve/CVE-2026-32814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-32882 page",
"url": "https://www.suse.com/security/cve/CVE-2026-32882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3950 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41069 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41069/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41071 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41071/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47178 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47247 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47247/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47251 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47251/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47254 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47709 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47714 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48029 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48029/"
}
],
"title": "gdk-pixbuf-loader-libheif-1.22.2-1.1 on GA media",
"tracking": {
"current_release_date": "2026-09-17T17:06:57Z",
"generator": {
"date": "2026-05-28T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:10878-1",
"initial_release_date": "2026-05-28T00:00:00Z",
"revision_history": [
{
"date": "2026-05-28T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-05-28T00:00:00Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T20:12:14Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:13:27Z",
"number": "4",
"summary": "unknown changes"
},
{
"date": "2026-09-17T17:06:57Z",
"number": "5",
"summary": "unknown changes"
}
],
"status": "final",
"version": "5"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"product_id": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.22.2-1.1?arch=aarch64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.22.2-1.1.aarch64",
"product": {
"name": "libheif-aom-0:1.22.2-1.1.aarch64",
"product_id": "libheif-aom-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.22.2-1.1?arch=aarch64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.22.2-1.1.aarch64",
"product": {
"name": "libheif-dav1d-0:1.22.2-1.1.aarch64",
"product_id": "libheif-dav1d-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.22.2-1.1?arch=aarch64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.22.2-1.1.aarch64",
"product": {
"name": "libheif-devel-0:1.22.2-1.1.aarch64",
"product_id": "libheif-devel-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.22.2-1.1?arch=aarch64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"product": {
"name": "libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"product_id": "libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.22.2-1.1?arch=aarch64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.22.2-1.1.aarch64",
"product": {
"name": "libheif-jpeg-0:1.22.2-1.1.aarch64",
"product_id": "libheif-jpeg-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.22.2-1.1?arch=aarch64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.22.2-1.1.aarch64",
"product": {
"name": "libheif-openh264-0:1.22.2-1.1.aarch64",
"product_id": "libheif-openh264-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libheif-openh264@1.22.2-1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.22.2-1.1.aarch64",
"product": {
"name": "libheif-openjpeg-0:1.22.2-1.1.aarch64",
"product_id": "libheif-openjpeg-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.22.2-1.1?arch=aarch64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.22.2-1.1.aarch64",
"product": {
"name": "libheif-rav1e-0:1.22.2-1.1.aarch64",
"product_id": "libheif-rav1e-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.22.2-1.1?arch=aarch64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-svtenc-0:1.22.2-1.1.aarch64",
"product": {
"name": "libheif-svtenc-0:1.22.2-1.1.aarch64",
"product_id": "libheif-svtenc-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-svtenc@1.22.2-1.1?arch=aarch64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.22.2-1.1.aarch64",
"product": {
"name": "libheif1-0:1.22.2-1.1.aarch64",
"product_id": "libheif1-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.22.2-1.1?arch=aarch64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-32bit-0:1.22.2-1.1.aarch64",
"product": {
"name": "libheif1-32bit-0:1.22.2-1.1.aarch64",
"product_id": "libheif1-32bit-0:1.22.2-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1-32bit@1.22.2-1.1?arch=aarch64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"product_id": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.22.2-1.1?arch=ppc64le\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.22.2-1.1.ppc64le",
"product": {
"name": "libheif-aom-0:1.22.2-1.1.ppc64le",
"product_id": "libheif-aom-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.22.2-1.1?arch=ppc64le\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.22.2-1.1.ppc64le",
"product": {
"name": "libheif-dav1d-0:1.22.2-1.1.ppc64le",
"product_id": "libheif-dav1d-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.22.2-1.1?arch=ppc64le\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.22.2-1.1.ppc64le",
"product": {
"name": "libheif-devel-0:1.22.2-1.1.ppc64le",
"product_id": "libheif-devel-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.22.2-1.1?arch=ppc64le\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"product": {
"name": "libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"product_id": "libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.22.2-1.1?arch=ppc64le\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.22.2-1.1.ppc64le",
"product": {
"name": "libheif-jpeg-0:1.22.2-1.1.ppc64le",
"product_id": "libheif-jpeg-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.22.2-1.1?arch=ppc64le\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.22.2-1.1.ppc64le",
"product": {
"name": "libheif-openh264-0:1.22.2-1.1.ppc64le",
"product_id": "libheif-openh264-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libheif-openh264@1.22.2-1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"product": {
"name": "libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"product_id": "libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.22.2-1.1?arch=ppc64le\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.22.2-1.1.ppc64le",
"product": {
"name": "libheif-rav1e-0:1.22.2-1.1.ppc64le",
"product_id": "libheif-rav1e-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.22.2-1.1?arch=ppc64le\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-svtenc-0:1.22.2-1.1.ppc64le",
"product": {
"name": "libheif-svtenc-0:1.22.2-1.1.ppc64le",
"product_id": "libheif-svtenc-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-svtenc@1.22.2-1.1?arch=ppc64le\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.22.2-1.1.ppc64le",
"product": {
"name": "libheif1-0:1.22.2-1.1.ppc64le",
"product_id": "libheif1-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.22.2-1.1?arch=ppc64le\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-32bit-0:1.22.2-1.1.ppc64le",
"product": {
"name": "libheif1-32bit-0:1.22.2-1.1.ppc64le",
"product_id": "libheif1-32bit-0:1.22.2-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1-32bit@1.22.2-1.1?arch=ppc64le\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"product_id": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.22.2-1.1?arch=s390x\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.22.2-1.1.s390x",
"product": {
"name": "libheif-aom-0:1.22.2-1.1.s390x",
"product_id": "libheif-aom-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.22.2-1.1?arch=s390x\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.22.2-1.1.s390x",
"product": {
"name": "libheif-dav1d-0:1.22.2-1.1.s390x",
"product_id": "libheif-dav1d-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.22.2-1.1?arch=s390x\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.22.2-1.1.s390x",
"product": {
"name": "libheif-devel-0:1.22.2-1.1.s390x",
"product_id": "libheif-devel-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.22.2-1.1?arch=s390x\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.22.2-1.1.s390x",
"product": {
"name": "libheif-ffmpeg-0:1.22.2-1.1.s390x",
"product_id": "libheif-ffmpeg-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.22.2-1.1?arch=s390x\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.22.2-1.1.s390x",
"product": {
"name": "libheif-jpeg-0:1.22.2-1.1.s390x",
"product_id": "libheif-jpeg-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.22.2-1.1?arch=s390x\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.22.2-1.1.s390x",
"product": {
"name": "libheif-openh264-0:1.22.2-1.1.s390x",
"product_id": "libheif-openh264-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libheif-openh264@1.22.2-1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.22.2-1.1.s390x",
"product": {
"name": "libheif-openjpeg-0:1.22.2-1.1.s390x",
"product_id": "libheif-openjpeg-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.22.2-1.1?arch=s390x\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.22.2-1.1.s390x",
"product": {
"name": "libheif-rav1e-0:1.22.2-1.1.s390x",
"product_id": "libheif-rav1e-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.22.2-1.1?arch=s390x\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-svtenc-0:1.22.2-1.1.s390x",
"product": {
"name": "libheif-svtenc-0:1.22.2-1.1.s390x",
"product_id": "libheif-svtenc-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-svtenc@1.22.2-1.1?arch=s390x\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.22.2-1.1.s390x",
"product": {
"name": "libheif1-0:1.22.2-1.1.s390x",
"product_id": "libheif1-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.22.2-1.1?arch=s390x\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-32bit-0:1.22.2-1.1.s390x",
"product": {
"name": "libheif1-32bit-0:1.22.2-1.1.s390x",
"product_id": "libheif1-32bit-0:1.22.2-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1-32bit@1.22.2-1.1?arch=s390x\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"product_id": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.22.2-1.1?arch=x86_64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.22.2-1.1.x86_64",
"product": {
"name": "libheif-aom-0:1.22.2-1.1.x86_64",
"product_id": "libheif-aom-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.22.2-1.1?arch=x86_64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.22.2-1.1.x86_64",
"product": {
"name": "libheif-dav1d-0:1.22.2-1.1.x86_64",
"product_id": "libheif-dav1d-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.22.2-1.1?arch=x86_64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.22.2-1.1.x86_64",
"product": {
"name": "libheif-devel-0:1.22.2-1.1.x86_64",
"product_id": "libheif-devel-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.22.2-1.1?arch=x86_64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"product": {
"name": "libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"product_id": "libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.22.2-1.1?arch=x86_64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.22.2-1.1.x86_64",
"product": {
"name": "libheif-jpeg-0:1.22.2-1.1.x86_64",
"product_id": "libheif-jpeg-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.22.2-1.1?arch=x86_64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.22.2-1.1.x86_64",
"product": {
"name": "libheif-openh264-0:1.22.2-1.1.x86_64",
"product_id": "libheif-openh264-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libheif-openh264@1.22.2-1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.22.2-1.1.x86_64",
"product": {
"name": "libheif-openjpeg-0:1.22.2-1.1.x86_64",
"product_id": "libheif-openjpeg-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.22.2-1.1?arch=x86_64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.22.2-1.1.x86_64",
"product": {
"name": "libheif-rav1e-0:1.22.2-1.1.x86_64",
"product_id": "libheif-rav1e-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.22.2-1.1?arch=x86_64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-svtenc-0:1.22.2-1.1.x86_64",
"product": {
"name": "libheif-svtenc-0:1.22.2-1.1.x86_64",
"product_id": "libheif-svtenc-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-svtenc@1.22.2-1.1?arch=x86_64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.22.2-1.1.x86_64",
"product": {
"name": "libheif1-0:1.22.2-1.1.x86_64",
"product_id": "libheif1-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.22.2-1.1?arch=x86_64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-32bit-0:1.22.2-1.1.x86_64",
"product": {
"name": "libheif1-32bit-0:1.22.2-1.1.x86_64",
"product_id": "libheif1-32bit-0:1.22.2-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.22.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1-32bit@1.22.2-1.1?arch=x86_64\u0026upstream=libheif-0:1.22.2-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64"
},
"product_reference": "libheif-aom-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le"
},
"product_reference": "libheif-aom-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x"
},
"product_reference": "libheif-aom-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64"
},
"product_reference": "libheif-aom-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64"
},
"product_reference": "libheif-dav1d-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le"
},
"product_reference": "libheif-dav1d-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x"
},
"product_reference": "libheif-dav1d-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64"
},
"product_reference": "libheif-dav1d-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64"
},
"product_reference": "libheif-devel-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le"
},
"product_reference": "libheif-devel-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x"
},
"product_reference": "libheif-devel-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64"
},
"product_reference": "libheif-devel-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64"
},
"product_reference": "libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le"
},
"product_reference": "libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x"
},
"product_reference": "libheif-ffmpeg-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64"
},
"product_reference": "libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64"
},
"product_reference": "libheif-jpeg-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le"
},
"product_reference": "libheif-jpeg-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x"
},
"product_reference": "libheif-jpeg-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64"
},
"product_reference": "libheif-jpeg-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64"
},
"product_reference": "libheif-openh264-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le"
},
"product_reference": "libheif-openh264-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x"
},
"product_reference": "libheif-openh264-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64"
},
"product_reference": "libheif-openh264-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64"
},
"product_reference": "libheif-openjpeg-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le"
},
"product_reference": "libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x"
},
"product_reference": "libheif-openjpeg-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64"
},
"product_reference": "libheif-openjpeg-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64"
},
"product_reference": "libheif-rav1e-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le"
},
"product_reference": "libheif-rav1e-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x"
},
"product_reference": "libheif-rav1e-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64"
},
"product_reference": "libheif-rav1e-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-svtenc-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64"
},
"product_reference": "libheif-svtenc-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-svtenc-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le"
},
"product_reference": "libheif-svtenc-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-svtenc-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x"
},
"product_reference": "libheif-svtenc-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-svtenc-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64"
},
"product_reference": "libheif-svtenc-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64"
},
"product_reference": "libheif1-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le"
},
"product_reference": "libheif1-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x"
},
"product_reference": "libheif1-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64"
},
"product_reference": "libheif1-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-32bit-0:1.22.2-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64"
},
"product_reference": "libheif1-32bit-0:1.22.2-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-32bit-0:1.22.2-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le"
},
"product_reference": "libheif1-32bit-0:1.22.2-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-32bit-0:1.22.2-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x"
},
"product_reference": "libheif1-32bit-0:1.22.2-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-32bit-0:1.22.2-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
},
"product_reference": "libheif1-32bit-0:1.22.2-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-32738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-32738"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the stsc box causes an unsigned integer underflow in the Chunk constructor (m_last_sample = 0 + 0 - 1 = UINT32_MAX), mapping all samples to an empty chunk and resulting in a denial of service. When any sample is accessed, the library reads from index 0 of an empty std::vector, causing a guaranteed SEGV (null-page read). The file parses successfully without producing an error; the crash occurs on the first frame access. This issue has been fixed in version 1.22.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-32738",
"url": "https://www.suse.com/security/cve/CVE-2026-32738"
},
{
"category": "external",
"summary": "SUSE Bug 1265874 for CVE-2026-32738",
"url": "https://bugzilla.suse.com/1265874"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-32738"
},
{
"cve": "CVE-2026-32739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-32739"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Box_stts::get_sample_duration(), consuming 100% CPU indefinitely with zero progress, leading to DoS. The loop has no iteration limit or timeout and is triggered during file open (parsing) - before any user interaction or image decoding. The process stays alive (no crash, no error logged), making it invisible to crash-based monitoring. This issue has been fixed in version 1.22.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-32739",
"url": "https://www.suse.com/security/cve/CVE-2026-32739"
},
{
"category": "external",
"summary": "SUSE Bug 1265875 for CVE-2026-32739",
"url": "https://bugzilla.suse.com/1265875"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-32739"
},
{
"cve": "CVE-2026-32740",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-32740"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write 64 bytes of fully attacker-controlled data past the end of a chroma plane heap allocation by crafting a HEIF/AVIF file with a 1x4 grid of odd-height tiles. The overflow is triggered during normal image decoding with default build configuration. The written bytes are chroma (Cb/Cr) pixel values from the attacking tile, giving the attacker full control over the overflow content. This issue has been fixed in version 1.22.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-32740",
"url": "https://www.suse.com/security/cve/CVE-2026-32740"
},
{
"category": "external",
"summary": "SUSE Bug 1265876 for CVE-2026-32740",
"url": "https://bugzilla.suse.com/1265876"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-32740"
},
{
"cve": "CVE-2026-32741",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-32741"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and below contain a heap buffer overflow in MaskImageCodec::decode_mask_image(). When decoding a HEIF file containing a mask image (mski), the function copies the full iloc extent data into a pixel buffer using memcpy(dst, data.data(), data.size()). The copy length data.size() is determined by the iloc extent in the file (attacker-controlled), while the destination buffer is sized based on the declared image dimensions. Because no upper-bound check exists on the data length, a crafted file whose iloc extent exceeds the pixel buffer allocation overflows the heap. The vulnerable single-memcpy branch is reached when the mskC property specifies bits_per_pixel = 8 and the ispe property declares an even width \u2265 64 (so that stride == width), with no changes to default security limits or external codec plugins required. This issue has been fixed in version 1.22.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-32741",
"url": "https://www.suse.com/security/cve/CVE-2026-32741"
},
{
"category": "external",
"summary": "SUSE Bug 1265877 for CVE-2026-32741",
"url": "https://bugzilla.suse.com/1265877"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-32741"
},
{
"cve": "CVE-2026-32814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-32814"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, when decoding a HEIF grid image with strict_decoding=false (the default), a corrupted tile silently fails to decode and the library returns heif_error_Ok with no indication of failure, leading to an uninitialized heap memory information leak. The canvas is allocated via create_clone_image_at_new_size() -\u003e plane.alloc() -\u003e new (std::nothrow) uint8_t[allocation_size] which does not zero the memory; only the alpha plane is explicitly initialized via fill_plane(), so the Y, Cb, and Cr planes contain whatever was previously at that heap address. The failed tile\u0027s region of the canvas is never written. It retains uninitialized heap data that is delivered to the caller as decoded pixel values (4,096 bytes per Y/Cb/Cr plane = 12,288+ bytes total). Any application using libheif to decode grid-based HEIF/AVIF files with default settings is vulnerable: a crafted .heic or .avif file causes 4,096+ bytes of heap memory to appear as pixel values in the decoded image, and the calling application receives heif_error_Ok, so it has no indication the output contains heap garbage. In server-side image processing, an uploaded crafted HEIF decoded and re-encoded (e.g., as PNG/JPEG for thumbnails, CDN, social media) can leak cross-user data such as auth tokens, database results, and other users\u0027 image data. This issue has been fixed in version 1.22.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-32814",
"url": "https://www.suse.com/security/cve/CVE-2026-32814"
},
{
"category": "external",
"summary": "SUSE Bug 1265878 for CVE-2026-32814",
"url": "https://bugzilla.suse.com/1265878"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-32814"
},
{
"cve": "CVE-2026-32882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-32882"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay() in libheif/pixelimage.cc. When compositing an overlay image (iovl) whose child image has a different bit depth for the alpha channel than for the color channels, the function indexes into the alpha plane using the color channel stride (in_stride) instead of the previously retrieved alpha_stride, causing reads past the end of the alpha buffer (up to 3,123 bytes for a 100x50 image with 10-bit color and 8-bit alpha). A crafted HEIF file can exploit this to cause a denial of service (crash) or potentially disclose adjacent heap memory through leaked bytes embedded in the decoded output pixels. This issue has been fixed in versionThis issue has been fixed in version 1.22.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-32882",
"url": "https://www.suse.com/security/cve/CVE-2026-32882"
},
{
"category": "external",
"summary": "SUSE Bug 1265879 for CVE-2026-32882",
"url": "https://bugzilla.suse.com/1265879"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-32882"
},
{
"cve": "CVE-2026-3950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3950"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was identified in strukturag libheif up to 1.21.2. This impacts the function Track::load of the file libheif/sequences/track.cc of the component stsz/stts. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploit is publicly available and might be used. Applying a patch is the recommended action to fix this issue. The patch available is inofficial and not approved yet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3950",
"url": "https://www.suse.com/security/cve/CVE-2026-3950"
},
{
"category": "external",
"summary": "SUSE Bug 1259544 for CVE-2026-3950",
"url": "https://bugzilla.suse.com/1259544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-3950"
},
{
"cve": "CVE-2026-41069",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41069"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a malformed HEIF sequence file can trigger an out-of-bounds read in core sequence parsing logic, causing DoS. A malformed file can have stco.entry_count == 0 (creating no chunks) while still passing validation because saio.entry_count == 0 matches, but with saiz.sample_count \u003e 0 the SampleAuxInfoReader constructor still enters its loop. This leads to an out-of-bounds dereference on the empty chunks[0] in chunked mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41069",
"url": "https://www.suse.com/security/cve/CVE-2026-41069"
},
{
"category": "external",
"summary": "SUSE Bug 1265979 for CVE-2026-41069",
"url": "https://bugzilla.suse.com/1265979"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-41069"
},
{
"cve": "CVE-2026-41071",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41071"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file where the saiz box declares more samples than actually exist in the track\u0027s chunk table causes a heap-buffer-overflow (out-of-bounds read) in the SampleAuxInfoReader constructor. The SampleAuxInfoReader constructor iterates over saiz-\u003eget_num_samples() samples but doesn\u0027t validate that this count is consistent with the number of chunks in the chunks vector. When saiz declares more samples than the chunks cover, the loop increments current_chunk past chunks.size(), causing an out-of-bounds read on the chunks vector. The vulnerability is triggered during file parsing (heif_context_read_from_file) without any additional user interaction. Any application using libheif to open untrusted HEIF files is affected. This issue has been fixed in version 1.22.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41071",
"url": "https://www.suse.com/security/cve/CVE-2026-41071"
},
{
"category": "external",
"summary": "SUSE Bug 1265980 for CVE-2026-41071",
"url": "https://bugzilla.suse.com/1265980"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-41071"
},
{
"cve": "CVE-2026-47178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47178"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file (uncompressed `unci` codec, tiled, component-interleaved, 4:2:0) triggers a heap out-of-bounds write in libheif\u0027s uncompressed tile decoder. The write overwrites the C++ vtable pointer of an adjacent `unc_decoder_component_interleave` object; the next virtual call dispatches to an attacker-chosen address. Version 1.22.0 patches the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47178",
"url": "https://www.suse.com/security/cve/CVE-2026-47178"
},
{
"category": "external",
"summary": "SUSE Bug 1265981 for CVE-2026-47178",
"url": "https://bugzilla.suse.com/1265981"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-47178"
},
{
"cve": "CVE-2026-47247",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47247"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side image processor (WordPress, Sharp/libvips, ImageMagick, etc.) can recover heap data - including library function pointers sufficient to defeat ASLR, or any other secret - from the publicly-downloadable transcoded JPEG/PNG/WebP output. Local attack vectors are also possible. Version 1.22.0 fixes the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47247",
"url": "https://www.suse.com/security/cve/CVE-2026-47247"
},
{
"category": "external",
"summary": "SUSE Bug 1265982 for CVE-2026-47247",
"url": "https://bugzilla.suse.com/1265982"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47247"
},
{
"cve": "CVE-2026-47251",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47251"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8b5`, PR #1712) introduced an integer overflow in the very security check it added. The check itself can be bypassed, allowing a crafted HEIF file with a VVC track to trigger the same out-of-bounds heap read that CVE-2026-3949 was meant to prevent. This is a separate, currently-unpatched vulnerability. Issue #1712 was closed as fixed without testing the edge case where `size` is near `UINT32_MAX`. Version 1.22.0 patches the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47251",
"url": "https://www.suse.com/security/cve/CVE-2026-47251"
},
{
"category": "external",
"summary": "SUSE Bug 1265983 for CVE-2026-47251",
"url": "https://bugzilla.suse.com/1265983"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47251"
},
{
"cve": "CVE-2026-47254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47254"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, `Track::init_sample_timing_table()` in `libheif/sequences/track.cc` stores an out-of-bounds chunk index (`m_chunks.size()`) into `m_presentation_timeline` when the number of chunks defined in the `stco` box is less than the number of samples in `stsz`. A subsequent call to `heif_track_get_next_raw_sequence_sample()` reads `m_chunks[chunk_idx]` with that OOB index, causing a heap-buffer-overflow. Version 1.22.0 fixes the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47254",
"url": "https://www.suse.com/security/cve/CVE-2026-47254"
},
{
"category": "external",
"summary": "SUSE Bug 1265987 for CVE-2026-47254",
"url": "https://bugzilla.suse.com/1265987"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47254"
},
{
"cve": "CVE-2026-47709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47709"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API `heif_image_handle_get_image_tiling()` when a malformed uncompressed HEIF image item has an associated `uncC` property but no associated `ispe` property. In debug builds this trips the `ispe \u0026\u0026 uncC` assertion in `ImageItem_uncompressed::get_heif_image_tiling()`. In a release/NDEBUG ASan build, the same file causes a null pointer read at address `0xa8`. Version 1.22.0 fixes the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47709",
"url": "https://www.suse.com/security/cve/CVE-2026-47709"
},
{
"category": "external",
"summary": "SUSE Bug 1265988 for CVE-2026-47709",
"url": "https://bugzilla.suse.com/1265988"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47709"
},
{
"cve": "CVE-2026-47714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47714"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in `libheif/region.cc` contains an integer overflow. Both `width` and `height` are `unsigned int` (32-bit) values parsed from the HEIF file. Their product can exceed `UINT32_MAX`, wrapping to a small value before the division by 8. This causes an undersized buffer allocation, leading to out-of-bounds memory access when the mask data is later interpreted as a `width x height` bitmap. Version 1.22.0 patches the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47714",
"url": "https://www.suse.com/security/cve/CVE-2026-47714"
},
{
"category": "external",
"summary": "SUSE Bug 1265989 for CVE-2026-47714",
"url": "https://bugzilla.suse.com/1265989"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47714"
},
{
"cve": "CVE-2026-48029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48029"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48029",
"url": "https://www.suse.com/security/cve/CVE-2026-48029"
},
{
"category": "external",
"summary": "SUSE Bug 1265990 for CVE-2026-48029",
"url": "https://bugzilla.suse.com/1265990"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.22.2-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.22.2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-48029"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…