CVE-2019-11471

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to…

published April 23, 2019

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01838 · 78.8th percentile
Published
2019-04-23T13:55Z
EPSS history
Timeline
  • 23 APR 13:55Z
    libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to…
    cvelistv5