Bug 2446924
| Summary: | CVE-2026-3949 libheif: libheif: Out-of-bounds read via local argument manipulation [fedora-all] | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | TEJ RATHI <trathi> |
| Component: | libheif | Assignee: | Neal Gompa <ngompa13> |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | 45 | CC: | dominik, multimedia-sig, ngompa13 |
| Target Milestone: | --- | Keywords: | Security, SecurityTracking |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | {"flaws": ["0819e94b-793f-4d34-90bb-7bec94a45d2c"]} | ||
| Fixed In Version: | libheif-1.23.5-3.fc45 libheif-1.23.5-3.fc44 libheif-1.23.5-3.fc43 | Doc Type: | --- |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2026-09-24 00:19:01 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 2446725 | ||
|
Description
TEJ RATHI
2026-03-12 10:04:33 UTC
FEDORA-2026-26ae66c60f (darktable-5.4.1-12.fc45, digikam-9.1.0-3.fc45, and 25 more) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-26ae66c60f FEDORA-2026-823e06dfcf (darktable-5.4.1-12.fc45, digikam-9.1.0-3.fc45, and 25 more) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-823e06dfcf FEDORA-2026-b8ff7153f1 (darktable-5.4.1-12.fc46, digikam-9.1.0-3.fc46, and 25 more) has been submitted as an update to Fedora 46. https://bodhi.fedoraproject.org/updates/FEDORA-2026-b8ff7153f1 FEDORA-2026-823e06dfcf (darktable-5.4.1-12.fc45, digikam-9.1.0-3.fc45, and 25 more) has been pushed to the Fedora 45 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2026-b8ff7153f1 (darktable-5.4.1-12.fc46, digikam-9.1.0-3.fc46, and 25 more) has been pushed to the Fedora 46 stable repository. If problem still persists, please make note of it in this bug report. This bug appears to have been reported against 'rawhide' during the Fedora Linux 45 development cycle. Changing version to 45. FEDORA-2026-a7307e699c (libheif-1.23.3-2.fc45) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-a7307e699c FEDORA-2026-cfdbb8b2f0 (libheif-1.23.5-3.fc44) has been submitted as an update to Fedora 44. https://bodhi.fedoraproject.org/updates/FEDORA-2026-cfdbb8b2f0 FEDORA-2026-022ff83e3e (libheif-1.23.5-3.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2026-022ff83e3e FEDORA-2026-78461b38b3 (libheif-1.23.5-3.fc45) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-78461b38b3 FEDORA-2026-78461b38b3 has been pushed to the Fedora 45 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-78461b38b3` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-78461b38b3 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2026-cfdbb8b2f0 has been pushed to the Fedora 44 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-cfdbb8b2f0` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-cfdbb8b2f0 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2026-022ff83e3e has been pushed to the Fedora 43 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-022ff83e3e` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-022ff83e3e See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2026-78461b38b3 (libheif-1.23.5-3.fc45) has been pushed to the Fedora 45 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2026-cfdbb8b2f0 (libheif-1.23.5-3.fc44) has been pushed to the Fedora 44 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2026-022ff83e3e (libheif-1.23.5-3.fc43) has been pushed to the Fedora 43 stable repository. If problem still persists, please make note of it in this bug report. |