libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:HStruktur Libheif
APPStruktur1.19.0 – 1.22.0 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2026-47247HIGH7.5PL ✓same product
libheif: wyciek pamięci sterty jako piksele w dekodowanych obrazach AVIF/HEIC
CVE-2026-32740HIGH8.8same product
libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-ov...
CVE-2024-41311HIGH8.1same product
In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay ima...
CVE-2024-25269HIGH7.5same product
libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to ...
CVE-2023-49462HIGH8.8same product
libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc.