SUSE-SU-2026:4276-1: libheif&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:4276-1 is a vulnerability in libheif&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 21-09-2026
   PublishedVulnerability first disclosed.
2. 22-09-2026
   Last modifiedVulnerability information updated.

Description

Security update for libheif This update for libheif fixes the following issues: - CVE-2026-84383: Heap buffer overflow in scale_nearest_neighbor() via duplicate alpha planes from nested iden/auxl items (bsc#1279443). - CVE-2026-84384: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS (bsc#1279445). - CVE-2026-84444: Out-of-bounds write in the unci encoder (bsc#1279448). - CVE-2026-84446: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames (bsc#1279447). - CVE-2026-84447: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS (bsc#1279446). - CVE-2026-84448: Heap out-of-bounds read in the inline-mask region API (bsc#1279449). - CVE-2026-84450: image item with `clap` property and an ispe declaring a dimension greater than `INT32_MAX + 1` can lead to a crash via an abort (bsc#1280002). - CVE-2026-84451: crafted HEIF file advertising a 4096 x 4096 uncompressed tile grid can cause an out-of-bounds read due to an integer overflow (bsc#1280001). - Out-of-bounds read and write in derived-item and pixel-plane handling (bsc#1279444). Changes for libheif: - Update to version 1.23.4 (jsc#PED-16355)

No weakness data has been published for this record.