Struktur vulnerabilities
We track 6 vulnerabilities in Struktur products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on April 21, 2025.
Latest Struktur vulnerabilities
- 7.5 High severity
libheif: NULL Pointer Dereference
libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item.
- 8.1 High severity
libheif: Out-of-bounds Read
In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-bounds read and write.
- 8.8 High severity
Libde265: Out-of-bounds Write
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates function at motion.cc.
- 8.1 High severity
Libde265: Buffer Copy without Checking Size of Input
Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the num_tile_columns and num_tile_row parameters in the function pic_parameter_set::dump.
- 7.8 High severity
libheif: Buffer Copy without Checking Size of Input
There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call.
- 9.8 Critical severity
strukturag/libde265: Out-of-bounds Write
Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.