USN-8846-1
UnscoredAdvisory
Published 29 Sept 2026In the index since 30 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 55
- of 17,957 indexed, latest versions
- Container images
- 51
- deployed by those charts
- Fix available
- 1 of 1
- affected package
libheif vulnerabilities
Carried by container images the latest versions of 55 of 17,957 indexed charts deploy, on 51 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libheifdeb | 1.12.0-2build1, 1.17.6-1ubuntu4, 1.17.6-1ubuntu4.1, 1.17.6-1ubuntu4.2+6 more | 1.12.0-2ubuntu0.1~esm5, 1.17.6-1ubuntu4.9, 1.21.2-3ubuntu0.6 | 51 |
- OSV records
- USN-8846-1
Charts affected
55 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| stunner-kurento-one2one-callstunner | 0.1.0 | 1 of 2See more | 13,548 |
| stash-boxswuuper-githubVerified publisher | 0.1.1 | 1 of 2See more | 8,828 |
| opencloudunxwaresVerified publisher | 0.2.3 | 1 of 13See more | 46,735 |
| calibre-webvista | 0.1.3 | 1 of 1See more | 8,381 |
| zoo-project-druzoo-projectOfficialVerified publisher | 0.10.4 | 1 of 6See more | 8,586 |
Container images carrying it
51 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apache/ | ae0b86d3c4d0 | libheif | 1.17.6-1ubuntu4.9 | 2 |
| homebridge/ | 77c685a40911 | libheif | 1.17.6-1ubuntu4.9 | 2 |
| kurento/ | 03c0d34d0828 | libheif | 1.17.6-1ubuntu4.9 | 2 |
| plantuml/ | 5f6f99ec2fc1 | libheif | 1.17.6-1ubuntu4.9 | 2 |
| ghcr.io/ | 82d0b161161d | libheif | 1.17.6-1ubuntu4.9 | 2 |
| ghcr.io/ | 5be52524664c | libheif | 1.12.0-2ubuntu0.1~esm5 | 2 |
| ghcr.io/ | 5f545698e907 | libheif | 1.12.0-2ubuntu0.1~esm5 | 2 |
| apache/ | 80072bb73dd3 | libheif | 1.21.2-3ubuntu0.6 | 1 |
| camptocamp/ | 5f9ddd0b9c5b | libheif | 1.21.2-3ubuntu0.6 | 1 |
| crocodilestick/ | c31a738b6d5e | libheif | 1.17.6-1ubuntu4.9 | 1 |
| gotson/ | 6c2a967bbe9a | libheif | 1.21.2-3ubuntu0.6 | 1 |
| gotson/ | 9cf102f5fb78 | libheif | 1.21.2-3ubuntu0.6 | 1 |
| grpl/ | c00aafee6629 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| itzg/ | de76286c0e73 | libheif | 1.21.2-3ubuntu0.6 | 1 |
| itzg/ | 77280d10744f | libheif | 1.17.6-1ubuntu4.9 | 1 |
| itzg/ | de5d1b1a83eb | libheif | 1.17.6-1ubuntu4.9 | 1 |
| langgenius/ | 3c694329357b | libheif | 1.17.6-1ubuntu4.9 | 1 |
| langgenius/ | 7d2fb04baf44 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| langgenius/ | 8269050f192e | libheif | 1.17.6-1ubuntu4.9 | 1 |
| linuxserver/ | 241009026e6f | libheif | 1.17.6-1ubuntu4.9 | 1 |
| mediagis/ | 7923a8e67197 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| mediagis/ | d0eae7b51374 | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| owncloud/ | 74c53d341076 | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| owncloud/ | b3f9efdcd7f7 | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| penpotapp/ | 47853d9bb9dd | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| penpotapp/ | e978e871be07 | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| penpotapp/ | 5c835ffd87ab | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| penpotapp/ | fa7086ad92b1 | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| photoprism/ | 2954334adbda | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| photoprism/ | fc6fd632ca74 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| qonstrukt/ | 089af7925aa1 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| schmitzis/ | f7e51ba2fb07 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| selenium/ | 5ac71fd8dd1e | libheif | 1.17.6-1ubuntu4.9 | 1 |
| selenium/ | 74a5c1c90f95 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| snipe/ | 141ebf2386fe | libheif | 1.17.6-1ubuntu4.9 | 1 |
| stashapp/ | a534c8afdf39 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| structurizr/ | 4b5ffb5119c8 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| timescale/ | 4f288c0a5213 | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| timescale/ | a8e3322e1cf9 | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| timescale/ | cdb9ae118899 | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| timescale/ | e8d0a9cc3db5 | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| timescale/ | ed719c0cd19d | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| zabbix/ | 0e5f69c4c54e | libheif | 1.17.6-1ubuntu4.9 | 1 |
| zabbix/ | 7d4d58086515 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| zooproject/ | 9a507cb7e2dd | libheif | 1.12.0-2ubuntu0.1~esm5 | 1 |
| ghcr.io/ | 8ba6617f33c9 | libheif | 1.21.2-3ubuntu0.6 | 1 |
| ghcr.io/ | 76771c3cc8c3 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| ghcr.io/ | 50a71a30f18e | libheif | 1.17.6-1ubuntu4.9 | 1 |
| ghcr.io/ | 46919d151d39 | libheif | 1.17.6-1ubuntu4.9 | 1 |
| ghcr.io/ | 0767226fcf20 | libheif | 1.17.6-1ubuntu4.9 | 1 |