High
Security advisory
Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-19498
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:34 UTC · Revision 1
Source evidence
Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
osv:CVE-2020-19498
Complete source record
{
"id": "6dcb3d6a35023d7de3fe94d088248c6710426c436417610b3ff9117c7dcb7121",
"url": "https://osv.dev/vulnerability/CVE-2020-19498",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-19498",
"summary": "Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts.",
"evidence": "osv:CVE-2020-19498",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2020-19498",
"aliases": [
"CVE-2020-19498"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/strukturag/libheif",
"type": "GIT",
"events": [
{
"introduced": "fca25874bb8021dede702bb7023a22af1a8a06ab"
},
{
"last_affected": "fca25874bb8021dede702bb7023a22af1a8a06ab"
},
{
"fixed": "2710c930918609caaf0a664e9c7bc3dce05d5b58"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:struktur:libheif:1.4.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.0"
},
{
"last_affected": "1.4.0"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "2710c930918609caaf0a664e9c7bc3dce05d5b58"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"1.4.0",
"v1.4.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-19498.json",
"vanir_signatures": [
{
"id": "CVE-2020-19498-0e06a858",
"digest": {
"threshold": 0.9,
"line_hashes": [
"147731676204354481572081716807761296933",
"77364423006871603135865097014949881459"
]
},
"source": "https://github.com/strukturag/libheif/commit/2710c930918609caaf0a664e9c7bc3dce05d5b58",
"target": {
"file": "libheif/heif_limits.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-19498-442a125d",
"digest": {
"length": 277,
"function_hash": "307425792697781340303895090367980089489"
},
"source": "https://github.com/strukturag/libheif/commit/2710c930918609caaf0a664e9c7bc3dce05d5b58",
"target": {
"file": "libheif/box.cc",
"function": "gcd"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-19498-44eabf83",
"digest": {
"length": 416,
"function_hash": "34309995185302358440847609850551581907"
},
"source": "https://github.com/strukturag/libheif/commit/2710c930918609caaf0a664e9c7bc3dce05d5b58",
"target": {
"file": "libheif/box.cc",
"function": "Fraction::Fraction"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-19498-9e4a2235",
"digest": {
"threshold": 0.9,
"line_hashes": [
"174289991246967375747520046371327395609",
"111489145872287977530596979928259219460",
"304054339016140649440792085094432672616",
"173391724684025248891390263453862560218",
"311848231624062782693932878457291591995",
"325448042776560416591639184439974592432",
"329452042709779413722893494174400048878",
"102652525751067957620548945159516718162",
"264577618361464340510664575409275156959",
"72232535568091744604674063881934611211",
"319591038302661741411339569734991551542",
"322210803745107444957324676128330990564",
"314498760441025998176084548309037472652",
"134834596149920996442843100337170125460",
"48415056289358879248000556526355377453",
"274326433738329996024662450983298537614",
"56451859347439688532124717040971852695",
"234069811981348545847737835386631666955",
"138556828025878628085655535894342730749",
"147781027242281381002661021720838884703",
"185948273879724541204857361409375031781",
"266525408217744466211788349308680964117",
"298101149826922467520863710733237268903",
"283540910113587762663556023797486954970",
"235175153560213853362309518880050412533",
"259297907606000672106840750699451926283",
"326633517225380638043625758770635647346",
"246158531361235038254832963096817241957",
"259964101900535481517711827618178748700",
"257786450703292688662862486076242412332",
"266268768642903653727189548898322070167",
"333014738404185582512521919861044770549"
]
},
"source": "https://github.com/strukturag/libheif/commit/2710c930918609caaf0a664e9c7bc3dce05d5b58",
"target": {
"file": "libheif/box.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:52:39Z"
}
}
],
"modified": "2026-10-20T13:52:39.316205315Z",
"provider": "osv",
"references": [
"https://github.com/strukturag/libheif/commit/2710c930918609caaf0a664e9c7bc3dce05d5b58",
"https://github.com/strukturag/libheif/issues/139"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2020-19498",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388329,
"published_at": "2021-07-21T18:15:09.133+00:00"
}