CVE-2026-84383
MediumAdvisory
Published 4 Sept 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 51
- of 17,781 indexed, latest versions
- Container images
- 46
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 51 of 17,781 indexed charts deploy, on 46 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libheifdeb | 1.12.0-2build1, 1.17.6-1ubuntu4, 1.17.6-1ubuntu4.1, 1.17.6-1ubuntu4.2+7 more | no fix listed | 46 |
- OSV records
- UBUNTU-CVE-2026-84383
Charts affected
51 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zoo-project-druzoo-projectOfficialVerified publisher | 0.10.4 | 1 of 6See more | 7,849 |
Container images carrying it
46 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apache/ | ae0b86d3c4d0 | libheif | no fix listed | 2 |
| gotson/ | 6c2a967bbe9a | libheif | no fix listed | 2 |
| homebridge/ | 77c685a40911 | libheif | no fix listed | 2 |
| kurento/ | 03c0d34d0828 | libheif | no fix listed | 2 |
| ghcr.io/ | 82d0b161161d | libheif | no fix listed | 2 |
| ghcr.io/ | 5be52524664c | libheif | no fix listed | 2 |
| ghcr.io/ | 5f545698e907 | libheif | no fix listed | 2 |
| apache/ | 80072bb73dd3 | libheif | no fix listed | 1 |
| itzg/ | 1c59f9631f3b | libheif | no fix listed | 1 |
| itzg/ | 4e29d14082d9 | libheif | no fix listed | 1 |
| itzg/ | 8672e335dbef | libheif | no fix listed | 1 |
| langgenius/ | 3c694329357b | libheif | no fix listed | 1 |
| langgenius/ | 8269050f192e | libheif | no fix listed | 1 |
| langgenius/ | da995c129e2f | libheif | no fix listed | 1 |
| linuxserver/ | 241009026e6f | libheif | no fix listed | 1 |
| mediagis/ | 7923a8e67197 | libheif | no fix listed | 1 |
| mediagis/ | d0eae7b51374 | libheif | no fix listed | 1 |
| owncloud/ | 74c53d341076 | libheif | no fix listed | 1 |
| owncloud/ | b3f9efdcd7f7 | libheif | no fix listed | 1 |
| penpotapp/ | 47853d9bb9dd | libheif | no fix listed | 1 |
| penpotapp/ | 5c835ffd87ab | libheif | no fix listed | 1 |
| penpotapp/ | 72a8061e8806 | libheif | no fix listed | 1 |
| photoprism/ | 2954334adbda | libheif | no fix listed | 1 |
| photoprism/ | 650c6ad5a651 | libheif | no fix listed | 1 |
| photoprism/ | 958642220223 | libheif | no fix listed | 1 |
| photoprism/ | fc6fd632ca74 | libheif | no fix listed | 1 |
| plantuml/ | 5f6f99ec2fc1 | libheif | no fix listed | 1 |
| posit/ | 527493ef621b | libheif | no fix listed | 1 |
| qonstrukt/ | 089af7925aa1 | libheif | no fix listed | 1 |
| selenium/ | 5ac71fd8dd1e | libheif | no fix listed | 1 |
| selenium/ | 74a5c1c90f95 | libheif | no fix listed | 1 |
| snipe/ | 141ebf2386fe | libheif | no fix listed | 1 |
| stashapp/ | a534c8afdf39 | libheif | no fix listed | 1 |
| structurizr/ | 4b5ffb5119c8 | libheif | no fix listed | 1 |
| timescale/ | a8e3322e1cf9 | libheif | no fix listed | 1 |
| timescale/ | cdb9ae118899 | libheif | no fix listed | 1 |
| timescale/ | d7db8f1085a3 | libheif | no fix listed | 1 |
| timescale/ | e8d0a9cc3db5 | libheif | no fix listed | 1 |
| timescale/ | ed719c0cd19d | libheif | no fix listed | 1 |
| zabbix/ | 0e5f69c4c54e | libheif | no fix listed | 1 |
| zabbix/ | 7d4d58086515 | libheif | no fix listed | 1 |
| zooproject/ | 9a507cb7e2dd | libheif | no fix listed | 1 |
| ghcr.io/ | d332ae2410f8 | libheif | no fix listed | 1 |
| ghcr.io/ | 76771c3cc8c3 | libheif | no fix listed | 1 |
| ghcr.io/ | c1a267d9ed6d | libheif | no fix listed | 1 |
| ghcr.io/ | 7c0464228f2f | libheif | no fix listed | 1 |