OPENSUSE-SU-2026:22052-1
Vulnerability from csaf_opensuse - Published: 2026-10-08 06:18 - Updated: 2026-10-19 17:24Summary
Security update for libheif
Severity
Moderate
Notes
Title of the patch: Security update for libheif
Description of the patch: This update for libheif fixes the following issues:
- CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829).
- AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions (bsc#1281953).
- Caller-configured security limits not enforced for MINI-box parsing (bsc#1281952).
- Heap out-of-bounds read in libheif alpha compositing via mismatched per-channel bit depths (bsc#1281951).
- Heap-use-after-free and double free in ImageItem::encode_to_bitstream_and_boxes (bsc#1281949).
- Incomplete OpenJPEG pre-decode security limits allow unsafe decode through the public API (bsc#1281954).
- JPEG 2000 pclr zero-column allocation amplification bypasses max_total_memory (bsc#1281950).
- Out-of-bounds heap read in unc_encoder_rgb_pixel_interleave (bsc#1281948).
Changes for libheif:
- update to 1.23.5:
* (GHSA-v8qw-hwjv-44hw) Memory exhaustion
through a mismatch between the container and the bitstream
image size. A crafted image can declare a small size in its
ispe property while the bitstream declares a much larger
coded frame. The container-level checks used the ispe size,
so the oversized bitstream reached the decoder, which
allocated a frame buffer for the in-band size before libheif
rejected the mismatch. The advisory demonstrated this for AV1
with the libaom backend (a 351-byte AVIF declaring 64x64 but
coding up to 27648x27648, allocating hundreds of MB to more
than 10 GB), but the same class affects every codec whose
real frame size lives in the bitstream. The coded size is now
checked against max_image_size_pixels in the codec-
independent decode path, before any bytes reach a decoder
plugin: all AV1 sequence headers, all HEVC/AVC/VVC SPS NAL
units (including those carried in the item data, not only the
ones in the configuration record), the JPEG SOF marker and
the JPEG 2000 SIZ reference grid are scanned for the largest
coded size. (high)
* (GHSA-qwpf-5wf7-r996) Heap use-after-free and
double free when encoding an image that carries a TAI
timestamp, including transcoding a file with an itai
property. ImageDescription shallow-copied its raw
heif_tai_timestamp_packet pointer, and a temporary in
ImageItem::encode_to_bitstream_and_boxes() freed the packet
while the item and the source image still held it. The
timestamp is now stored by value. (medium)
* (GHSA-9c75-9g8r-4728) Memory amplification
through a JPEG 2000 pclr box declaring zero palette columns.
The entry-count bound was skipped for zero columns, so an
11-byte box allocated 65,535 empty palette entries, and
nested j2kH containers could repeat this within the child and
nesting limits: a 3 KB file reached about 330 MB RSS, none of
it charged to max_total_memory. Zero columns are rejected
(ISO/IEC 15444-1 requires 1 to 255), the byte bound is
unconditional, and the palette storage is charged to the
memory limits. (medium)
* (GHSA-r7gr-2xm2-23wf) Heap out-of-bounds read
in alpha compositing for uncompressed (unci) images whose
colour planes have different bit depths.
Op_flatten_alpha_plane read every plane through the sample
type of the first colour plane, so an 8-bit blue plane next
to 16-bit red and green planes was read with a halved stride
past its end, and the bytes ended up in the composited
output. ColorState now tracks one bit depth per plane, and
the operator declines mixed sample widths at planning time.
(medium)
* (GHSA-q492-cfcm-895h) The OpenJPEG decoder
plugin's pre-decode size check bounded the JPEG 2000 window
span (x1-x0)*(y1-y0) but not the absolute reference-grid
coordinates, so a codestream with a 17-pixel window on a grid
near the 32-bit boundary reached opj_decode(). Against
OpenJPEG 2.3.1 this produced a heap-buffer-overflow write
inside OpenJPEG (the class of CVE-2020-6851); OpenJPEG 2.5.4
rejects the input. The reference-grid area is now bounded as
well. (low)
* (GHSA-qfj5-c4pq-q998) Heap out-of-bounds read in the
uncompressed encoder when an application attached a separate
alpha plane to an image with an interleaved chroma format.
The interleaved encoders took their component list from the
chroma format (three entries) but decided whether to write
alpha from the presence of an alpha plane, and indexed the
list at [3]. heif_image_add_plane() now rejects a separate
alpha plane on interleaved images, and the encoders derive
both decisions from the chroma format. Only reachable through
the public API; decoding never produces such an image. (low)
* (GHSA-7pwf-qh74-p35w) The caller's heif_security_limits were
not applied when parsing a mini box (the MIAF minimized image
format) or the av1C/hvcC blob embedded in it; the built-in
defaults were used instead. An application that tightened the
limits got no enforcement of its max_memory_block_size or
max_total_memory on such files. The allocations are bounded
by the bytes present in the box, so this could not amplify
memory use. (low)
Patchnames: openSUSE-Leap-16.0-1865
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4 (Medium)
Affected products
Recommended
42 products, the same list as for
CVE-2020-6851
Threats
Impact
moderate
References
17 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libheif",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libheif fixes the following issues:\n\n- CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829).\n- AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions (bsc#1281953).\n- Caller-configured security limits not enforced for MINI-box parsing (bsc#1281952).\n- Heap out-of-bounds read in libheif alpha compositing via mismatched per-channel bit depths (bsc#1281951).\n- Heap-use-after-free and double free in ImageItem::encode_to_bitstream_and_boxes (bsc#1281949).\n- Incomplete OpenJPEG pre-decode security limits allow unsafe decode through the public API (bsc#1281954).\n- JPEG 2000 pclr zero-column allocation amplification bypasses max_total_memory (bsc#1281950).\n- Out-of-bounds heap read in unc_encoder_rgb_pixel_interleave (bsc#1281948).\n\nChanges for libheif:\n\n- update to 1.23.5:\n * (GHSA-v8qw-hwjv-44hw) Memory exhaustion\n through a mismatch between the container and the bitstream\n image size. A crafted image can declare a small size in its\n ispe property while the bitstream declares a much larger\n coded frame. The container-level checks used the ispe size,\n so the oversized bitstream reached the decoder, which\n allocated a frame buffer for the in-band size before libheif\n rejected the mismatch. The advisory demonstrated this for AV1\n with the libaom backend (a 351-byte AVIF declaring 64x64 but\n coding up to 27648x27648, allocating hundreds of MB to more\n than 10 GB), but the same class affects every codec whose\n real frame size lives in the bitstream. The coded size is now\n checked against max_image_size_pixels in the codec-\n independent decode path, before any bytes reach a decoder\n plugin: all AV1 sequence headers, all HEVC/AVC/VVC SPS NAL\n units (including those carried in the item data, not only the\n ones in the configuration record), the JPEG SOF marker and\n the JPEG 2000 SIZ reference grid are scanned for the largest\n coded size. (high)\n * (GHSA-qwpf-5wf7-r996) Heap use-after-free and\n double free when encoding an image that carries a TAI\n timestamp, including transcoding a file with an itai\n property. ImageDescription shallow-copied its raw\n heif_tai_timestamp_packet pointer, and a temporary in\n ImageItem::encode_to_bitstream_and_boxes() freed the packet\n while the item and the source image still held it. The\n timestamp is now stored by value. (medium)\n * (GHSA-9c75-9g8r-4728) Memory amplification\n through a JPEG 2000 pclr box declaring zero palette columns.\n The entry-count bound was skipped for zero columns, so an\n 11-byte box allocated 65,535 empty palette entries, and\n nested j2kH containers could repeat this within the child and\n nesting limits: a 3 KB file reached about 330 MB RSS, none of\n it charged to max_total_memory. Zero columns are rejected\n (ISO/IEC 15444-1 requires 1 to 255), the byte bound is\n unconditional, and the palette storage is charged to the\n memory limits. (medium)\n * (GHSA-r7gr-2xm2-23wf) Heap out-of-bounds read\n in alpha compositing for uncompressed (unci) images whose\n colour planes have different bit depths.\n Op_flatten_alpha_plane read every plane through the sample\n type of the first colour plane, so an 8-bit blue plane next\n to 16-bit red and green planes was read with a halved stride\n past its end, and the bytes ended up in the composited\n output. ColorState now tracks one bit depth per plane, and\n the operator declines mixed sample widths at planning time.\n (medium)\n * (GHSA-q492-cfcm-895h) The OpenJPEG decoder\n plugin\u0027s pre-decode size check bounded the JPEG 2000 window\n span (x1-x0)*(y1-y0) but not the absolute reference-grid\n coordinates, so a codestream with a 17-pixel window on a grid\n near the 32-bit boundary reached opj_decode(). Against\n OpenJPEG 2.3.1 this produced a heap-buffer-overflow write\n inside OpenJPEG (the class of CVE-2020-6851); OpenJPEG 2.5.4\n rejects the input. The reference-grid area is now bounded as\n well. (low)\n * (GHSA-qfj5-c4pq-q998) Heap out-of-bounds read in the\n uncompressed encoder when an application attached a separate\n alpha plane to an image with an interleaved chroma format.\n The interleaved encoders took their component list from the\n chroma format (three entries) but decided whether to write\n alpha from the presence of an alpha plane, and indexed the\n list at [3]. heif_image_add_plane() now rejects a separate\n alpha plane on interleaved images, and the encoders derive\n both decisions from the chroma format. Only reachable through\n the public API; decoding never produces such an image. (low)\n * (GHSA-7pwf-qh74-p35w) The caller\u0027s heif_security_limits were\n not applied when parsing a mini box (the MIAF minimized image\n format) or the av1C/hvcC blob embedded in it; the built-in\n defaults were used instead. An application that tightened the\n limits got no enforcement of its max_memory_block_size or\n max_total_memory on such files. The allocations are bounded\n by the bytes present in the box, so this could not amplify\n memory use. (low)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1865",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22052-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1281829",
"url": "https://bugzilla.suse.com/1281829"
},
{
"category": "self",
"summary": "SUSE Bug 1281948",
"url": "https://bugzilla.suse.com/1281948"
},
{
"category": "self",
"summary": "SUSE Bug 1281949",
"url": "https://bugzilla.suse.com/1281949"
},
{
"category": "self",
"summary": "SUSE Bug 1281950",
"url": "https://bugzilla.suse.com/1281950"
},
{
"category": "self",
"summary": "SUSE Bug 1281951",
"url": "https://bugzilla.suse.com/1281951"
},
{
"category": "self",
"summary": "SUSE Bug 1281952",
"url": "https://bugzilla.suse.com/1281952"
},
{
"category": "self",
"summary": "SUSE Bug 1281953",
"url": "https://bugzilla.suse.com/1281953"
},
{
"category": "self",
"summary": "SUSE Bug 1281954",
"url": "https://bugzilla.suse.com/1281954"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-6851 page",
"url": "https://www.suse.com/security/cve/CVE-2020-6851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84449 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84449/"
}
],
"title": "Security update for libheif",
"tracking": {
"current_release_date": "2026-10-19T17:24:41Z",
"generator": {
"date": "2026-10-08T06:18:28Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:22052-1",
"initial_release_date": "2026-10-08T06:18:28Z",
"revision_history": [
{
"date": "2026-10-08T06:18:28Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-19T17:24:41Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64",
"product_id": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.23.5-160000.1.1?arch=aarch64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.23.5-160000.1.1.aarch64",
"product": {
"name": "libheif-aom-0:1.23.5-160000.1.1.aarch64",
"product_id": "libheif-aom-0:1.23.5-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.23.5-160000.1.1?arch=aarch64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.23.5-160000.1.1.aarch64",
"product": {
"name": "libheif-dav1d-0:1.23.5-160000.1.1.aarch64",
"product_id": "libheif-dav1d-0:1.23.5-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.23.5-160000.1.1?arch=aarch64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.23.5-160000.1.1.aarch64",
"product": {
"name": "libheif-devel-0:1.23.5-160000.1.1.aarch64",
"product_id": "libheif-devel-0:1.23.5-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.23.5-160000.1.1?arch=aarch64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64",
"product": {
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64",
"product_id": "libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.23.5-160000.1.1?arch=aarch64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.23.5-160000.1.1.aarch64",
"product": {
"name": "libheif-jpeg-0:1.23.5-160000.1.1.aarch64",
"product_id": "libheif-jpeg-0:1.23.5-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.23.5-160000.1.1?arch=aarch64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.23.5-160000.1.1.aarch64",
"product": {
"name": "libheif-openh264-0:1.23.5-160000.1.1.aarch64",
"product_id": "libheif-openh264-0:1.23.5-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openh264@1.23.5-160000.1.1?arch=aarch64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.aarch64",
"product": {
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.aarch64",
"product_id": "libheif-openjpeg-0:1.23.5-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.23.5-160000.1.1?arch=aarch64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.23.5-160000.1.1.aarch64",
"product": {
"name": "libheif-rav1e-0:1.23.5-160000.1.1.aarch64",
"product_id": "libheif-rav1e-0:1.23.5-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.23.5-160000.1.1?arch=aarch64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-svtenc-0:1.23.5-160000.1.1.aarch64",
"product": {
"name": "libheif-svtenc-0:1.23.5-160000.1.1.aarch64",
"product_id": "libheif-svtenc-0:1.23.5-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-svtenc@1.23.5-160000.1.1?arch=aarch64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.23.5-160000.1.1.aarch64",
"product": {
"name": "libheif1-0:1.23.5-160000.1.1.aarch64",
"product_id": "libheif1-0:1.23.5-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.23.5-160000.1.1?arch=aarch64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le",
"product_id": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.23.5-160000.1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.23.5-160000.1.1.ppc64le",
"product": {
"name": "libheif-aom-0:1.23.5-160000.1.1.ppc64le",
"product_id": "libheif-aom-0:1.23.5-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.23.5-160000.1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.23.5-160000.1.1.ppc64le",
"product": {
"name": "libheif-dav1d-0:1.23.5-160000.1.1.ppc64le",
"product_id": "libheif-dav1d-0:1.23.5-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.23.5-160000.1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.23.5-160000.1.1.ppc64le",
"product": {
"name": "libheif-devel-0:1.23.5-160000.1.1.ppc64le",
"product_id": "libheif-devel-0:1.23.5-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.23.5-160000.1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le",
"product": {
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le",
"product_id": "libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.23.5-160000.1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.23.5-160000.1.1.ppc64le",
"product": {
"name": "libheif-jpeg-0:1.23.5-160000.1.1.ppc64le",
"product_id": "libheif-jpeg-0:1.23.5-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.23.5-160000.1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.23.5-160000.1.1.ppc64le",
"product": {
"name": "libheif-openh264-0:1.23.5-160000.1.1.ppc64le",
"product_id": "libheif-openh264-0:1.23.5-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openh264@1.23.5-160000.1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le",
"product": {
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le",
"product_id": "libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.23.5-160000.1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.23.5-160000.1.1.ppc64le",
"product": {
"name": "libheif-rav1e-0:1.23.5-160000.1.1.ppc64le",
"product_id": "libheif-rav1e-0:1.23.5-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.23.5-160000.1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.23.5-160000.1.1.ppc64le",
"product": {
"name": "libheif1-0:1.23.5-160000.1.1.ppc64le",
"product_id": "libheif1-0:1.23.5-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.23.5-160000.1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x",
"product_id": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.23.5-160000.1.1?arch=s390x\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.23.5-160000.1.1.s390x",
"product": {
"name": "libheif-aom-0:1.23.5-160000.1.1.s390x",
"product_id": "libheif-aom-0:1.23.5-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.23.5-160000.1.1?arch=s390x\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.23.5-160000.1.1.s390x",
"product": {
"name": "libheif-dav1d-0:1.23.5-160000.1.1.s390x",
"product_id": "libheif-dav1d-0:1.23.5-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.23.5-160000.1.1?arch=s390x\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.23.5-160000.1.1.s390x",
"product": {
"name": "libheif-devel-0:1.23.5-160000.1.1.s390x",
"product_id": "libheif-devel-0:1.23.5-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.23.5-160000.1.1?arch=s390x\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.s390x",
"product": {
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.s390x",
"product_id": "libheif-ffmpeg-0:1.23.5-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.23.5-160000.1.1?arch=s390x\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.23.5-160000.1.1.s390x",
"product": {
"name": "libheif-jpeg-0:1.23.5-160000.1.1.s390x",
"product_id": "libheif-jpeg-0:1.23.5-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.23.5-160000.1.1?arch=s390x\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.23.5-160000.1.1.s390x",
"product": {
"name": "libheif-openh264-0:1.23.5-160000.1.1.s390x",
"product_id": "libheif-openh264-0:1.23.5-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openh264@1.23.5-160000.1.1?arch=s390x\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.s390x",
"product": {
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.s390x",
"product_id": "libheif-openjpeg-0:1.23.5-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.23.5-160000.1.1?arch=s390x\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.23.5-160000.1.1.s390x",
"product": {
"name": "libheif-rav1e-0:1.23.5-160000.1.1.s390x",
"product_id": "libheif-rav1e-0:1.23.5-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.23.5-160000.1.1?arch=s390x\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.23.5-160000.1.1.s390x",
"product": {
"name": "libheif1-0:1.23.5-160000.1.1.s390x",
"product_id": "libheif1-0:1.23.5-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.23.5-160000.1.1?arch=s390x\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64",
"product_id": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.23.5-160000.1.1?arch=x86_64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.23.5-160000.1.1.x86_64",
"product": {
"name": "libheif-aom-0:1.23.5-160000.1.1.x86_64",
"product_id": "libheif-aom-0:1.23.5-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.23.5-160000.1.1?arch=x86_64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.23.5-160000.1.1.x86_64",
"product": {
"name": "libheif-dav1d-0:1.23.5-160000.1.1.x86_64",
"product_id": "libheif-dav1d-0:1.23.5-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.23.5-160000.1.1?arch=x86_64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.23.5-160000.1.1.x86_64",
"product": {
"name": "libheif-devel-0:1.23.5-160000.1.1.x86_64",
"product_id": "libheif-devel-0:1.23.5-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.23.5-160000.1.1?arch=x86_64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64",
"product": {
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64",
"product_id": "libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.23.5-160000.1.1?arch=x86_64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.23.5-160000.1.1.x86_64",
"product": {
"name": "libheif-jpeg-0:1.23.5-160000.1.1.x86_64",
"product_id": "libheif-jpeg-0:1.23.5-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.23.5-160000.1.1?arch=x86_64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.23.5-160000.1.1.x86_64",
"product": {
"name": "libheif-openh264-0:1.23.5-160000.1.1.x86_64",
"product_id": "libheif-openh264-0:1.23.5-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openh264@1.23.5-160000.1.1?arch=x86_64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.x86_64",
"product": {
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.x86_64",
"product_id": "libheif-openjpeg-0:1.23.5-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.23.5-160000.1.1?arch=x86_64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.23.5-160000.1.1.x86_64",
"product": {
"name": "libheif-rav1e-0:1.23.5-160000.1.1.x86_64",
"product_id": "libheif-rav1e-0:1.23.5-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.23.5-160000.1.1?arch=x86_64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-svtenc-0:1.23.5-160000.1.1.x86_64",
"product": {
"name": "libheif-svtenc-0:1.23.5-160000.1.1.x86_64",
"product_id": "libheif-svtenc-0:1.23.5-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-svtenc@1.23.5-160000.1.1?arch=x86_64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.23.5-160000.1.1.x86_64",
"product": {
"name": "libheif1-0:1.23.5-160000.1.1.x86_64",
"product_id": "libheif1-0:1.23.5-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.23.5-160000.1.1?arch=x86_64\u0026upstream=libheif-0:1.23.5-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.23.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.aarch64"
},
"product_reference": "libheif-aom-0:1.23.5-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.23.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.ppc64le"
},
"product_reference": "libheif-aom-0:1.23.5-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.23.5-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.s390x"
},
"product_reference": "libheif-aom-0:1.23.5-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.23.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.x86_64"
},
"product_reference": "libheif-aom-0:1.23.5-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.23.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.aarch64"
},
"product_reference": "libheif-dav1d-0:1.23.5-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.23.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.ppc64le"
},
"product_reference": "libheif-dav1d-0:1.23.5-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.23.5-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.s390x"
},
"product_reference": "libheif-dav1d-0:1.23.5-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.23.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.x86_64"
},
"product_reference": "libheif-dav1d-0:1.23.5-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.23.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.aarch64"
},
"product_reference": "libheif-devel-0:1.23.5-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.23.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.ppc64le"
},
"product_reference": "libheif-devel-0:1.23.5-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.23.5-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.s390x"
},
"product_reference": "libheif-devel-0:1.23.5-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.23.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.x86_64"
},
"product_reference": "libheif-devel-0:1.23.5-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64"
},
"product_reference": "libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le"
},
"product_reference": "libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.s390x"
},
"product_reference": "libheif-ffmpeg-0:1.23.5-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64"
},
"product_reference": "libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.23.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.aarch64"
},
"product_reference": "libheif-jpeg-0:1.23.5-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.23.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.ppc64le"
},
"product_reference": "libheif-jpeg-0:1.23.5-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.23.5-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.s390x"
},
"product_reference": "libheif-jpeg-0:1.23.5-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.23.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.x86_64"
},
"product_reference": "libheif-jpeg-0:1.23.5-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.23.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.aarch64"
},
"product_reference": "libheif-openh264-0:1.23.5-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.23.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.ppc64le"
},
"product_reference": "libheif-openh264-0:1.23.5-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.23.5-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.s390x"
},
"product_reference": "libheif-openh264-0:1.23.5-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.23.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.x86_64"
},
"product_reference": "libheif-openh264-0:1.23.5-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.aarch64"
},
"product_reference": "libheif-openjpeg-0:1.23.5-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le"
},
"product_reference": "libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.s390x"
},
"product_reference": "libheif-openjpeg-0:1.23.5-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.23.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.x86_64"
},
"product_reference": "libheif-openjpeg-0:1.23.5-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.23.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.aarch64"
},
"product_reference": "libheif-rav1e-0:1.23.5-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.23.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.ppc64le"
},
"product_reference": "libheif-rav1e-0:1.23.5-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.23.5-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.s390x"
},
"product_reference": "libheif-rav1e-0:1.23.5-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.23.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.x86_64"
},
"product_reference": "libheif-rav1e-0:1.23.5-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-svtenc-0:1.23.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.aarch64"
},
"product_reference": "libheif-svtenc-0:1.23.5-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-svtenc-0:1.23.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.x86_64"
},
"product_reference": "libheif-svtenc-0:1.23.5-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.23.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.aarch64"
},
"product_reference": "libheif1-0:1.23.5-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.23.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.ppc64le"
},
"product_reference": "libheif1-0:1.23.5-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.23.5-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.s390x"
},
"product_reference": "libheif1-0:1.23.5-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.23.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.x86_64"
},
"product_reference": "libheif1-0:1.23.5-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-6851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-6851"
}
],
"notes": [
{
"category": "general",
"text": "OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-6851",
"url": "https://www.suse.com/security/cve/CVE-2020-6851"
},
{
"category": "external",
"summary": "SUSE Bug 1160782 for CVE-2020-6851",
"url": "https://bugzilla.suse.com/1160782"
},
{
"category": "external",
"summary": "SUSE Bug 1162090 for CVE-2020-6851",
"url": "https://bugzilla.suse.com/1162090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T06:18:28Z",
"details": "important"
}
],
"title": "CVE-2020-6851"
},
{
"cve": "CVE-2026-84449",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84449"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace() stores image-plane strides in an integer width that can overflow for extremely large RGB images created through heif_image_create() and heif_image_add_plane(). The resulting wrapped stride causes the conversion loop in libheif/color-conversion/rgb2yuv.cc to compute an invalid input pointer and read beyond the allocated interleaved plane while heif_context_encode_image() performs RGB-to-YCbCr conversion. This can crash the encoding process. This issue is fixed in version 1.19.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84449",
"url": "https://www.suse.com/security/cve/CVE-2026-84449"
},
{
"category": "external",
"summary": "SUSE Bug 1281829 for CVE-2026-84449",
"url": "https://bugzilla.suse.com/1281829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:gdk-pixbuf-loader-libheif-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-aom-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-dav1d-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-devel-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-ffmpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-jpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openh264-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-openjpeg-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif-rav1e-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif-svtenc-0:1.23.5-160000.1.1.x86_64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.aarch64",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.ppc64le",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.s390x",
"openSUSE Leap 16.0:libheif1-0:1.23.5-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T06:18:28Z",
"details": "moderate"
}
],
"title": "CVE-2026-84449"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.