libheif (SUSE:Linux Enterprise Module for Desktop Applications 15 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 package libheif, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2023-0996 — CVSS 7.8 (high): There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this…
• CVE-2023-29659 — CVSS 6.5 (medium): A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round()…