> USN-7952-1: libheif vulnerabilities

[SOURCE] Ubuntu Security Notices [DATE: 12/01/2026 01:03] [LANGUAGE: EN]

It was discovered that libheif did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial
of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS
and Ubuntu 24.04 LTS. (CVE-2024-25269)

Aldo Ristori discovered that libheif did not correctly handle certain
memory operations. An attacker could possibly use this issue to cause a
denial of service or execute arbitrary code. (CVE-2025-68431)

[messages.read_original_source] →