A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.
References
Configurations
History
21 Nov 2024, 07:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/strukturag/libheif/issues/794 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAE6NQBA3Q7GS6VTNDZRZZZVPPEFUEZ/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGKHDCS4HRZE3UGXYYDYPTIPNIBRLQ5L/ - |
11 May 2023, 22:59
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| References | (MISC) https://github.com/strukturag/libheif/issues/794 - Exploit, Issue Tracking, Third Party Advisory | |
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LGKHDCS4HRZE3UGXYYDYPTIPNIBRLQ5L/ - Mailing List, Third Party Advisory | |
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CKAE6NQBA3Q7GS6VTNDZRZZZVPPEFUEZ/ - Mailing List, Third Party Advisory | |
| CWE | CWE-369 | |
| CPE | cpe:2.3:a:struktur:libheif:1.15.1:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* |
06 May 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
05 May 2023, 16:27
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-05 16:15
Updated : 2024-11-21 07:57
NVD link : CVE-2023-29659
Mitre link : CVE-2023-29659
CVE.ORG link : CVE-2023-29659
JSON object : View
Products Affected
struktur
- libheif
fedoraproject
- fedora
CWE
CWE-369
Divide By Zero