A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.
Weakness
The product divides a value by zero.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libheif | Struktur | 1.15.1 (including) | 1.15.1 (including) |
| Libheif | Ubuntu | bionic | * |
| Libheif | Ubuntu | esm-apps/focal | * |
| Libheif | Ubuntu | esm-apps/jammy | * |
| Libheif | Ubuntu | focal | * |
| Libheif | Ubuntu | jammy | * |
| Libheif | Ubuntu | kinetic | * |
| Libheif | Ubuntu | lunar | * |
| Libheif | Ubuntu | trusty | * |
| Libheif | Ubuntu | upstream | * |
| Libheif | Ubuntu | xenial | * |
References
- https://github.com/strukturag/libheif/issues/794
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAE6NQBA3Q7GS6VTNDZRZZZVPPEFUEZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGKHDCS4HRZE3UGXYYDYPTIPNIBRLQ5L/
- https://github.com/strukturag/libheif/issues/794
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAE6NQBA3Q7GS6VTNDZRZZZVPPEFUEZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGKHDCS4HRZE3UGXYYDYPTIPNIBRLQ5L/