CVE-2024-25269: High severity struktur Libheif vulnerability
libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libheifto a version that resolves this vulnerability.Fixed in 1.17.6-2 - Upgrade
Upgrade
debian/libheifto a version that resolves this vulnerability.Fixed in 1.19.8-1+deb13u1Fixed in 1.23.6-2~deb13u1Fixed in 1.23.6-2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25269?
The severity of CVE-2024-25269 is classified as moderate due to its potential to cause denial of service.
How do I fix CVE-2024-25269?
To fix CVE-2024-25269, update libheif to version 1.17.7 or higher.
What kind of attack can CVE-2024-25269 facilitate?
CVE-2024-25269 can facilitate a denial of service attack due to a memory leak.
Is CVE-2024-25269 exploitable remotely?
Yes, CVE-2024-25269 can be exploited remotely if the vulnerable libheif software is used in a susceptible application.
Which versions of libheif are affected by CVE-2024-25269?
All versions of libheif up to and including 1.17.6 are affected by CVE-2024-25269.