CVE-2025-43967: Null Pointer Dereference
Published Apr 20, 2025
·Updated
libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item.
Affected Software
2 affected components
libheif libheif<1.19.6
struktur Libheif<1.19.6
Remediation
Event History
Apr 20, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Apr 17, 57340
Event
via FIRST·01:40 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-43967?
CVE-2025-43967 has a medium severity due to a potential NULL pointer dereference.
2
How do I fix CVE-2025-43967?
To fix CVE-2025-43967, upgrade libheif to version 1.19.6 or later.
3
What is the specific issue caused by CVE-2025-43967?
CVE-2025-43967 is caused by a NULL pointer dereference in ImageItem_Grid::get_decoder when a grid image references a nonexistent image item.
4
Which versions of libheif are affected by CVE-2025-43967?
CVE-2025-43967 affects libheif versions prior to 1.19.6.
5
Is CVE-2025-43967 exploitative?
CVE-2025-43967 can potentially be exploited to cause application crashes due to the NULL pointer dereference.