{"schemaVersion":3,"id":"SUSE-SU-2026:4276-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for libheif\n\nThis update for libheif fixes the following issues:\n\n- CVE-2026-84383: Heap buffer overflow in scale_nearest_neighbor() via duplicate alpha planes from nested iden/auxl\n  items (bsc#1279443).\n- CVE-2026-84384: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS\n  (bsc#1279445).\n- CVE-2026-84444: Out-of-bounds write in the unci encoder (bsc#1279448).\n- CVE-2026-84446: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory,\n  bypassing max_sequence_frames (bsc#1279447).\n- CVE-2026-84447: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle\n  limits, causing CPU/memory amplification DoS (bsc#1279446).\n- CVE-2026-84448: Heap out-of-bounds read in the inline-mask region API (bsc#1279449).\n- CVE-2026-84450: image item with `clap` property and an ispe declaring a dimension greater than `INT32_MAX + 1` can\n  lead to a crash via an abort (bsc#1280002).\n- CVE-2026-84451: crafted HEIF file advertising a 4096 x 4096 uncompressed tile grid can cause an out-of-bounds read due\n  to an integer overflow (bsc#1280001).\n- Out-of-bounds read and write in derived-item and pixel-plane handling (bsc#1279444).\n\nChanges for libheif:\n\n- Update to version 1.23.4 (jsc#PED-16355)","dates":{"published":"2026-09-21T09:21:15.000Z","modified":"2026-09-22T10:30:21.899Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"libheif&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7","name":"libheif","label":"libheif&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libheif&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7","purlType":"rpm","versions":[{"text":"< 1.23.4-150700.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.23.4-150700.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libheif&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","name":"libheif","label":"libheif&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libheif&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7","purlType":"rpm","versions":[{"text":"< 1.23.4-150700.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.23.4-150700.3.21.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264276-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20264276-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1279443","label":"bugzilla.suse.com/1279443","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1279444","label":"bugzilla.suse.com/1279444","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1279445","label":"bugzilla.suse.com/1279445","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1279446","label":"bugzilla.suse.com/1279446","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1279447","label":"bugzilla.suse.com/1279447","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1279448","label":"bugzilla.suse.com/1279448","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1279449","label":"bugzilla.suse.com/1279449","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1280001","label":"bugzilla.suse.com/1280001","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1280002","label":"bugzilla.suse.com/1280002","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84383","label":"www.suse.com/security/cve/CVE-2026-84383","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84384","label":"www.suse.com/security/cve/CVE-2026-84384","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84444","label":"www.suse.com/security/cve/CVE-2026-84444","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84446","label":"www.suse.com/security/cve/CVE-2026-84446","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84447","label":"www.suse.com/security/cve/CVE-2026-84447","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84448","label":"www.suse.com/security/cve/CVE-2026-84448","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84450","label":"www.suse.com/security/cve/CVE-2026-84450","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84451","label":"www.suse.com/security/cve/CVE-2026-84451","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2026-84383","CVE-2026-84384","CVE-2026-84444","CVE-2026-84446","CVE-2026-84447","CVE-2026-84448","CVE-2026-84450","CVE-2026-84451"],"downstream":[],"duplicates":[],"related":["CVE-2026-84383","CVE-2026-84384","CVE-2026-84444","CVE-2026-84446","CVE-2026-84447","CVE-2026-84448","CVE-2026-84450","CVE-2026-84451"]},"timeline":[{"kind":"published","date":"2026-09-21T09:21:15.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-22T10:30:21.899Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T17:58:49.770Z","stale":false,"partial":false}}