S
Vendor security profile
struktur
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical0
CISA KEV0
Public exploit12
Patch rate%21
Avg. CVSS6.9
12-month vulnerability rate
0
1
0
0
0
0
5
0
8
0
0
0
CVE KEV
CVE severity distribution
14toplam CVE
High7 (50%)
Medium7 (50%)
Patch and exploitation view
%21
Verified patch
%0
CISA KEV
%86
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
4.3
CVE-2026-84450
libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289)
S
Patch status unknownEPSS %0
3.7
CVE-2026-84449
libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV
S
Patch status unknownEPSS %0
6.5
CVE-2026-84451
libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read
S
Patch status unknownEPSS %0
7.5
CVE-2026-84447
libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS
S
Patch status unknownEPSS %1
7.5
CVE-2026-84384
libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS
S
Patch status unknownEPSS %1
7.4
CVE-2026-84444
libheif uncompressed tiled image encoding allows out-of-bounds write
S
Patch status unknownEPSS %0
9.8
CVE-2026-84383
libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items
S
Patch status unknownEPSS %1
7.5
CVE-2026-84446
libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames
S
Patch status unknownEPSS %0
4.0
CVE-2026-84448
libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image)
S
Patch status unknownEPSS %0
7.4
CVE-2026-54241
libde265: SAO sequential filter heap buffer overflow via signed integer overflow
S
Patch status unknownEPSS %0