OPENSUSE-SU-2026:11719-1
Vulnerability from csaf_opensuse - Published: 2026-09-08 00:00 - Updated: 2026-09-19 08:20Summary
gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media
Description of the patch: These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11719
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.1 (High)
Affected products
Recommended
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
48 products, the same list as for
CVE-2026-84383
Threats
Impact
important
8.1 (High)
Affected products
Recommended
48 products, the same list as for
CVE-2026-84383
Threats
Impact
important
7.5 (High)
Affected products
Recommended
48 products, the same list as for
CVE-2026-84383
Threats
Impact
important
7.5 (High)
Affected products
Recommended
48 products, the same list as for
CVE-2026-84383
Threats
Impact
important
6.8 (Medium)
Affected products
Recommended
48 products, the same list as for
CVE-2026-84383
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
48 products, the same list as for
CVE-2026-84383
Threats
Impact
important
7.5 (High)
Affected products
Recommended
48 products, the same list as for
CVE-2026-84383
Threats
Impact
important
References
26 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11719",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11719-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84383 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84383/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84384 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84384/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84444 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84444/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84446 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84446/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84448 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84448/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84450 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84450/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84451 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84451/"
}
],
"title": "gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media",
"tracking": {
"current_release_date": "2026-09-19T08:20:15Z",
"generator": {
"date": "2026-09-08T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11719-1",
"initial_release_date": "2026-09-08T00:00:00Z",
"revision_history": [
{
"date": "2026-09-08T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T20:27:35Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:30:00Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-17T17:23:27Z",
"number": "4",
"summary": "unknown changes"
},
{
"date": "2026-09-19T08:20:15Z",
"number": "5",
"summary": "unknown changes"
}
],
"status": "final",
"version": "5"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"product_id": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.23.4-1.1?arch=aarch64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.23.4-1.1.aarch64",
"product": {
"name": "libheif-aom-0:1.23.4-1.1.aarch64",
"product_id": "libheif-aom-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.23.4-1.1?arch=aarch64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.23.4-1.1.aarch64",
"product": {
"name": "libheif-dav1d-0:1.23.4-1.1.aarch64",
"product_id": "libheif-dav1d-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.23.4-1.1?arch=aarch64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.23.4-1.1.aarch64",
"product": {
"name": "libheif-devel-0:1.23.4-1.1.aarch64",
"product_id": "libheif-devel-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.23.4-1.1?arch=aarch64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"product": {
"name": "libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"product_id": "libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.23.4-1.1?arch=aarch64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.23.4-1.1.aarch64",
"product": {
"name": "libheif-jpeg-0:1.23.4-1.1.aarch64",
"product_id": "libheif-jpeg-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.23.4-1.1?arch=aarch64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.23.4-1.1.aarch64",
"product": {
"name": "libheif-openh264-0:1.23.4-1.1.aarch64",
"product_id": "libheif-openh264-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libheif-openh264@1.23.4-1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.23.4-1.1.aarch64",
"product": {
"name": "libheif-openjpeg-0:1.23.4-1.1.aarch64",
"product_id": "libheif-openjpeg-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.23.4-1.1?arch=aarch64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.23.4-1.1.aarch64",
"product": {
"name": "libheif-rav1e-0:1.23.4-1.1.aarch64",
"product_id": "libheif-rav1e-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.23.4-1.1?arch=aarch64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-svtenc-0:1.23.4-1.1.aarch64",
"product": {
"name": "libheif-svtenc-0:1.23.4-1.1.aarch64",
"product_id": "libheif-svtenc-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-svtenc@1.23.4-1.1?arch=aarch64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.23.4-1.1.aarch64",
"product": {
"name": "libheif1-0:1.23.4-1.1.aarch64",
"product_id": "libheif1-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.23.4-1.1?arch=aarch64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-32bit-0:1.23.4-1.1.aarch64",
"product": {
"name": "libheif1-32bit-0:1.23.4-1.1.aarch64",
"product_id": "libheif1-32bit-0:1.23.4-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1-32bit@1.23.4-1.1?arch=aarch64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"product_id": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.23.4-1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.23.4-1.1.ppc64le",
"product": {
"name": "libheif-aom-0:1.23.4-1.1.ppc64le",
"product_id": "libheif-aom-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.23.4-1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.23.4-1.1.ppc64le",
"product": {
"name": "libheif-dav1d-0:1.23.4-1.1.ppc64le",
"product_id": "libheif-dav1d-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.23.4-1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.23.4-1.1.ppc64le",
"product": {
"name": "libheif-devel-0:1.23.4-1.1.ppc64le",
"product_id": "libheif-devel-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.23.4-1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"product": {
"name": "libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"product_id": "libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.23.4-1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.23.4-1.1.ppc64le",
"product": {
"name": "libheif-jpeg-0:1.23.4-1.1.ppc64le",
"product_id": "libheif-jpeg-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.23.4-1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.23.4-1.1.ppc64le",
"product": {
"name": "libheif-openh264-0:1.23.4-1.1.ppc64le",
"product_id": "libheif-openh264-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libheif-openh264@1.23.4-1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"product": {
"name": "libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"product_id": "libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.23.4-1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.23.4-1.1.ppc64le",
"product": {
"name": "libheif-rav1e-0:1.23.4-1.1.ppc64le",
"product_id": "libheif-rav1e-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.23.4-1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-svtenc-0:1.23.4-1.1.ppc64le",
"product": {
"name": "libheif-svtenc-0:1.23.4-1.1.ppc64le",
"product_id": "libheif-svtenc-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-svtenc@1.23.4-1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.23.4-1.1.ppc64le",
"product": {
"name": "libheif1-0:1.23.4-1.1.ppc64le",
"product_id": "libheif1-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.23.4-1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-32bit-0:1.23.4-1.1.ppc64le",
"product": {
"name": "libheif1-32bit-0:1.23.4-1.1.ppc64le",
"product_id": "libheif1-32bit-0:1.23.4-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1-32bit@1.23.4-1.1?arch=ppc64le\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"product_id": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.23.4-1.1?arch=s390x\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.23.4-1.1.s390x",
"product": {
"name": "libheif-aom-0:1.23.4-1.1.s390x",
"product_id": "libheif-aom-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.23.4-1.1?arch=s390x\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.23.4-1.1.s390x",
"product": {
"name": "libheif-dav1d-0:1.23.4-1.1.s390x",
"product_id": "libheif-dav1d-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.23.4-1.1?arch=s390x\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.23.4-1.1.s390x",
"product": {
"name": "libheif-devel-0:1.23.4-1.1.s390x",
"product_id": "libheif-devel-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.23.4-1.1?arch=s390x\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.23.4-1.1.s390x",
"product": {
"name": "libheif-ffmpeg-0:1.23.4-1.1.s390x",
"product_id": "libheif-ffmpeg-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.23.4-1.1?arch=s390x\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.23.4-1.1.s390x",
"product": {
"name": "libheif-jpeg-0:1.23.4-1.1.s390x",
"product_id": "libheif-jpeg-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.23.4-1.1?arch=s390x\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.23.4-1.1.s390x",
"product": {
"name": "libheif-openh264-0:1.23.4-1.1.s390x",
"product_id": "libheif-openh264-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libheif-openh264@1.23.4-1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.23.4-1.1.s390x",
"product": {
"name": "libheif-openjpeg-0:1.23.4-1.1.s390x",
"product_id": "libheif-openjpeg-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.23.4-1.1?arch=s390x\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.23.4-1.1.s390x",
"product": {
"name": "libheif-rav1e-0:1.23.4-1.1.s390x",
"product_id": "libheif-rav1e-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.23.4-1.1?arch=s390x\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-svtenc-0:1.23.4-1.1.s390x",
"product": {
"name": "libheif-svtenc-0:1.23.4-1.1.s390x",
"product_id": "libheif-svtenc-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-svtenc@1.23.4-1.1?arch=s390x\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.23.4-1.1.s390x",
"product": {
"name": "libheif1-0:1.23.4-1.1.s390x",
"product_id": "libheif1-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.23.4-1.1?arch=s390x\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-32bit-0:1.23.4-1.1.s390x",
"product": {
"name": "libheif1-32bit-0:1.23.4-1.1.s390x",
"product_id": "libheif1-32bit-0:1.23.4-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1-32bit@1.23.4-1.1?arch=s390x\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"product": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"product_id": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gdk-pixbuf-loader-libheif@1.23.4-1.1?arch=x86_64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-aom-0:1.23.4-1.1.x86_64",
"product": {
"name": "libheif-aom-0:1.23.4-1.1.x86_64",
"product_id": "libheif-aom-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-aom@1.23.4-1.1?arch=x86_64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-dav1d-0:1.23.4-1.1.x86_64",
"product": {
"name": "libheif-dav1d-0:1.23.4-1.1.x86_64",
"product_id": "libheif-dav1d-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-dav1d@1.23.4-1.1?arch=x86_64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-devel-0:1.23.4-1.1.x86_64",
"product": {
"name": "libheif-devel-0:1.23.4-1.1.x86_64",
"product_id": "libheif-devel-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-devel@1.23.4-1.1?arch=x86_64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"product": {
"name": "libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"product_id": "libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-ffmpeg@1.23.4-1.1?arch=x86_64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-jpeg-0:1.23.4-1.1.x86_64",
"product": {
"name": "libheif-jpeg-0:1.23.4-1.1.x86_64",
"product_id": "libheif-jpeg-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-jpeg@1.23.4-1.1?arch=x86_64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-openh264-0:1.23.4-1.1.x86_64",
"product": {
"name": "libheif-openh264-0:1.23.4-1.1.x86_64",
"product_id": "libheif-openh264-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libheif-openh264@1.23.4-1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libheif-openjpeg-0:1.23.4-1.1.x86_64",
"product": {
"name": "libheif-openjpeg-0:1.23.4-1.1.x86_64",
"product_id": "libheif-openjpeg-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-openjpeg@1.23.4-1.1?arch=x86_64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-rav1e-0:1.23.4-1.1.x86_64",
"product": {
"name": "libheif-rav1e-0:1.23.4-1.1.x86_64",
"product_id": "libheif-rav1e-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-rav1e@1.23.4-1.1?arch=x86_64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif-svtenc-0:1.23.4-1.1.x86_64",
"product": {
"name": "libheif-svtenc-0:1.23.4-1.1.x86_64",
"product_id": "libheif-svtenc-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif-svtenc@1.23.4-1.1?arch=x86_64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-0:1.23.4-1.1.x86_64",
"product": {
"name": "libheif1-0:1.23.4-1.1.x86_64",
"product_id": "libheif1-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1@1.23.4-1.1?arch=x86_64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libheif1-32bit-0:1.23.4-1.1.x86_64",
"product": {
"name": "libheif1-32bit-0:1.23.4-1.1.x86_64",
"product_id": "libheif1-32bit-0:1.23.4-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:struktur:libheif:1.23.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libheif1-32bit@1.23.4-1.1?arch=x86_64\u0026upstream=libheif-0:1.23.4-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64"
},
"product_reference": "gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64"
},
"product_reference": "libheif-aom-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le"
},
"product_reference": "libheif-aom-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x"
},
"product_reference": "libheif-aom-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-aom-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64"
},
"product_reference": "libheif-aom-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64"
},
"product_reference": "libheif-dav1d-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le"
},
"product_reference": "libheif-dav1d-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x"
},
"product_reference": "libheif-dav1d-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-dav1d-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64"
},
"product_reference": "libheif-dav1d-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64"
},
"product_reference": "libheif-devel-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le"
},
"product_reference": "libheif-devel-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x"
},
"product_reference": "libheif-devel-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-devel-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64"
},
"product_reference": "libheif-devel-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64"
},
"product_reference": "libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le"
},
"product_reference": "libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x"
},
"product_reference": "libheif-ffmpeg-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-ffmpeg-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64"
},
"product_reference": "libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64"
},
"product_reference": "libheif-jpeg-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le"
},
"product_reference": "libheif-jpeg-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x"
},
"product_reference": "libheif-jpeg-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-jpeg-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64"
},
"product_reference": "libheif-jpeg-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64"
},
"product_reference": "libheif-openh264-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le"
},
"product_reference": "libheif-openh264-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x"
},
"product_reference": "libheif-openh264-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openh264-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64"
},
"product_reference": "libheif-openh264-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64"
},
"product_reference": "libheif-openjpeg-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le"
},
"product_reference": "libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x"
},
"product_reference": "libheif-openjpeg-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-openjpeg-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64"
},
"product_reference": "libheif-openjpeg-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64"
},
"product_reference": "libheif-rav1e-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le"
},
"product_reference": "libheif-rav1e-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x"
},
"product_reference": "libheif-rav1e-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-rav1e-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64"
},
"product_reference": "libheif-rav1e-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-svtenc-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64"
},
"product_reference": "libheif-svtenc-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-svtenc-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le"
},
"product_reference": "libheif-svtenc-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-svtenc-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x"
},
"product_reference": "libheif-svtenc-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif-svtenc-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64"
},
"product_reference": "libheif-svtenc-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64"
},
"product_reference": "libheif1-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le"
},
"product_reference": "libheif1-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x"
},
"product_reference": "libheif1-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64"
},
"product_reference": "libheif1-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-32bit-0:1.23.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64"
},
"product_reference": "libheif1-32bit-0:1.23.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-32bit-0:1.23.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le"
},
"product_reference": "libheif1-32bit-0:1.23.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-32bit-0:1.23.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x"
},
"product_reference": "libheif1-32bit-0:1.23.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libheif1-32bit-0:1.23.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
},
"product_reference": "libheif1-32bit-0:1.23.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-84383",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84383"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPixelImage::transfer_channel_from_image_as() append duplicate Alpha planes with different bit depths to m_storage. HeifPixelImage::scale_nearest_neighbor() in libheif/image/pixelimage.cc allocates the destination Alpha plane using the first plane\u0027s 8-bit depth, then iterates a later 10-bit or 12-bit Alpha component and writes uint16_t samples into the same 8-bit allocation. The output geometry controls the overflow extent and the encoded sample values control the data written, allowing a remote file processed by heif_decode_image() to cause a heap out-of-bounds write. This issue is fixed in version 1.23.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84383",
"url": "https://www.suse.com/security/cve/CVE-2026-84383"
},
{
"category": "external",
"summary": "SUSE Bug 1279443 for CVE-2026-84383",
"url": "https://bugzilla.suse.com/1279443"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-08T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84383"
},
{
"cve": "CVE-2026-84384",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84384"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompress_brotli() and do_inflate() to grow accumulated output without an effective size limit or MemoryHandle accounting. The brotli path has no output bound, while the zlib path checks only a small temporary buffer in a branch that valid streams do not reach, and overlapping icef units can decompress the same payload repeatedly. HeifContext::interpret_heif_file_images() processes multiple compressed metadata items during file opening, allowing a small file to consume unbounded memory and terminate the process. This issue is fixed in version 1.23.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84384",
"url": "https://www.suse.com/security/cve/CVE-2026-84384"
},
{
"category": "external",
"summary": "SUSE Bug 1279445 for CVE-2026-84384",
"url": "https://bugzilla.suse.com/1279445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-08T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84384"
},
{
"cve": "CVE-2026-84444",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84444"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, heif_context_add_image_tile() accepts an independently constructed tile whose component-plane dimensions do not match the tile geometry established by the prototype image. ImageItem_uncompressed::add_image_tile() passes that tile directly to unc_encoder::encode_tile(), which lacked the check_component_sizes() gate and sizes its output from the configured tile geometry while copying the tile\u0027s actual component-plane dimensions. An oversized component plane can therefore make unc_encoder_component_interleave::encode_tile() copy attacker-controlled data beyond the heap output buffer. This issue is fixed in version 1.23.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84444",
"url": "https://www.suse.com/security/cve/CVE-2026-84444"
},
{
"category": "external",
"summary": "SUSE Bug 1279448 for CVE-2026-84444",
"url": "https://bugzilla.suse.com/1279448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-08T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84444"
},
{
"cve": "CVE-2026-84446",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84446"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list data can make Track::init_sample_timing_table() compute a logical m_num_output_samples value that exceeds the uint32_t counters used by Track_Visual::decode_next_image_sample() and Track::get_next_sample_raw_data(). The resulting comparison can never reach the oversized output count, causing non-terminating decode or raw-sample loops and bypassing max_sequence_frames. The same sequence path repeatedly calls Box_stts::get_sample_duration() and allocates Chunk::m_sample_ranges and Track::m_presentation_timeline outside MemoryHandle accounting, allowing severe CPU and memory exhaustion from a small file. This issue is fixed in version 1.23.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84446",
"url": "https://www.suse.com/security/cve/CVE-2026-84446"
},
{
"category": "external",
"summary": "SUSE Bug 1279447 for CVE-2026-84446",
"url": "https://bugzilla.suse.com/1279447"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-08T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84446"
},
{
"cve": "CVE-2026-84447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84447"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processed_ids is copied per branch and ImageItem::decode_image() has no shared operation budget. This vulnerability is fixed in 1.23.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84447",
"url": "https://www.suse.com/security/cve/CVE-2026-84447"
},
{
"category": "external",
"summary": "SUSE Bug 1279446 for CVE-2026-84447",
"url": "https://bugzilla.suse.com/1279446"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-08T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84447"
},
{
"cve": "CVE-2026-84448",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84448"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inline_mask_data() function in libheif/api/libheif/heif_regions.cc accepts mask_data_len without verifying that it equals the byte count required by width and height. A later heif_region_get_mask_image() call derives the read length from the region geometry, so an undersized stored buffer causes heif_region_get_inline_mask_image() to read beyond the heap allocation and copy adjacent bytes into the returned monochrome mask image. This can disclose heap data or crash an application that constructs region metadata through the writer API, while the file-parsing path is not affected because it validates the canonical mask size. This issue is fixed in version 1.23.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84448",
"url": "https://www.suse.com/security/cve/CVE-2026-84448"
},
{
"category": "external",
"summary": "SUSE Bug 1279449 for CVE-2026-84448",
"url": "https://bugzilla.suse.com/1279449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-08T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-84448"
},
{
"cve": "CVE-2026-84450",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84450"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item containing a clap property and an ispe width or height greater than INT32_MAX + 1 can reach crop calculations through heif_image_handle_get_image_tiling(). Box_clap::left_rounded() or Box_clap::top_rounded() passes the image dimension minus one to Fraction::Fraction(), whose uint32_t constructor uses an assertion as input validation, causing assert-enabled builds to abort. Release builds can instead compute invalid crop geometry, and the tiling API returns dimensions that the normal decode security limits reject. This issue is fixed in version 1.23.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84450",
"url": "https://www.suse.com/security/cve/CVE-2026-84450"
},
{
"category": "external",
"summary": "SUSE Bug 1280002 for CVE-2026-84450",
"url": "https://bugzilla.suse.com/1280002"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-08T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84450"
},
{
"cve": "CVE-2026-84451",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84451"
}
],
"notes": [
{
"category": "general",
"text": "libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of unc_decoder::get_compressed_image_data_uncompressed() in libheif/codecs/uncompressed/unc_decoder.cc retains an addition-based range check that can wrap when a crafted uncompressed tile grid produces a large range_start_offset and range_size. The overflow makes the bounds comparison pass and allows heif_image_handle_decode_image_tile() to call memcpy() with an invalid source pointer and a very large length when decoding a valid high-index advertised tile. This incomplete remediation of CVE-2026-62292 can reliably crash tile-processing applications, while whole-image decoding is not claimed to reach the demonstrated path. This issue is fixed in version 1.23.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84451",
"url": "https://www.suse.com/security/cve/CVE-2026-84451"
},
{
"category": "external",
"summary": "SUSE Bug 1280001 for CVE-2026-84451",
"url": "https://bugzilla.suse.com/1280001"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:gdk-pixbuf-loader-libheif-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-aom-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-dav1d-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-devel-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-ffmpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-jpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openh264-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-openjpeg-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-rav1e-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif-svtenc-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-0:1.23.4-1.1.x86_64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.aarch64",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.ppc64le",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.s390x",
"openSUSE Tumbleweed:libheif1-32bit-0:1.23.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-08T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84451"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…