From d9fea910c4ef8daf3ecc5e829b0e5491159e9f89 Mon Sep 17 00:00:00 2001
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Date: Wed, 23 Sep 2026 22:40:29 +1200
Subject: [PATCH] libheif: ignore CVE-2026-84383

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-84383

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
---
 meta-multimedia/recipes-multimedia/libheif/libheif_1.21.2.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-multimedia/recipes-multimedia/libheif/libheif_1.21.2.bb b/meta-multimedia/recipes-multimedia/libheif/libheif_1.21.2.bb
index 165ed0ad2a..70176c7c52 100644
--- a/meta-multimedia/recipes-multimedia/libheif/libheif_1.21.2.bb
+++ b/meta-multimedia/recipes-multimedia/libheif/libheif_1.21.2.bb
@@ -34,3 +34,5 @@ PACKAGECONFIG[jpeg2000] = "-DWITH_OpenJPEG_ENCODER=ON -DWITH_OpenJPEG_DECODER=ON
 PACKAGECONFIG[openh264] = ",,openh264"
 
 FILES:${PN} += "${libdir}/libheif ${datadir}/thumbnailers ${libdir}/gdk-pixbuf*"
+
+CVE_STATUS[CVE-2026-84383] = "cpe-incorrect: This vulnerability was introduced in v1.22"