Strukturag vulnerabilities
44 CVEs and advisories name Strukturag as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-120208libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder
- CVE-2026-84450libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289)
- CVE-2026-84449libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV
- CVE-2026-84451libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read
- CVE-2026-84447libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS
- CVE-2026-84384libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS
- CVE-2026-84444libheif uncompressed tiled image encoding allows out-of-bounds write
- CVE-2026-84383libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items
- CVE-2026-84446libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames
- CVE-2026-84448libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image)
- CVE-2026-54241libde265: SAO sequential filter heap buffer overflow via signed integer overflow
- CVE-2026-54240libde265: Pixel accessor signed integer overflow causes heap OOB read/write
- CVE-2026-62377libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110)
- CVE-2026-62291libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions
- CVE-2026-62292libheif: Out-of-bounds read in uncompressed unci tile range slicing
- CVE-2026-62289libheif: Integer underflow in Fraction constructor via double clap transform application
- CVE-2026-50142libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check)
- CVE-2026-48029libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow
- CVE-2026-47709libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe
- CVE-2026-47254libheif Has Heap Buffer Overflow in `Track::get_next_sample_raw_data()` -- OOB Chunk Vector Access
- CVE-2026-47251libheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data2
- CVE-2026-47247libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation
- CVE-2026-47178libheif has Heap Out Of Bounds Write in unci subsystem
- CVE-2026-47714libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation
- CVE-2026-45383libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.18
- CVE-2026-45382libde265 has a heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry
- CVE-2026-49346libde265 has a heap buffer overflow in de265_image_get_buffer via SPS dimension integer overflow
- CVE-2026-49295libde265 has an out-of-bounds write in process_reference_picture_set via predicted short-term RPS
- CVE-2026-49337libde265 has an unbounded memory leak via orphaned slice headers in `read_slice_NAL`
- CVE-2026-49271libheif: Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoder