Vulnerabilities in libheif and libde265
Multiple new security advisories affect the libheif and libde265 codecs; users should verify versions against the published fixes.
An oss-security post highlights numerous recent security advisories for libheif and libde265, the open-source libraries used to decode HEIF/HEVC images. The GitHub security pages of both strukturag projects list several new advisories published over the past few months. The poster, Alan Coopersmith, urges anyone using these codecs to check their versions, while noting the related heif-heist.com site is more promotional than informational.
52