Skip to content
Strukturag Libheif vulnerabilities
-
strukturag libheif
libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder
CVE-2026-120208
Fix available
7.7 High
-
strukturag libheif
libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV
CVE-2026-84449
Fix available
3.7 Low
-
strukturag libheif
libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image)
CVE-2026-84448
Fix available
4.0 Medium
-
strukturag libheif
libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS
CVE-2026-84447
Fix available
7.5 High
-
strukturag libheif
libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames
CVE-2026-84446
Fix available
7.5 High
-
strukturag libheif
libheif uncompressed tiled image encoding allows out-of-bounds write
CVE-2026-84444
Fix available
7.4 High
-
strukturag libheif
libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS
CVE-2026-84384
Fix available
7.5 High
-
strukturag libheif
libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read
CVE-2026-84451
Fix available
6.5 Medium
-
strukturag libheif
libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289)
CVE-2026-84450
Fix available
4.3 Medium
-
strukturag libheif
libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items
CVE-2026-84383
Public exploitFix available
9.8 Critical
-
strukturag libheif
libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110)
CVE-2026-62377
Fix available
4.3 Medium
-
strukturag libheif
libheif: Out-of-bounds read in uncompressed unci tile range slicing
CVE-2026-62292
Fix available
8.7 High
-
strukturag libheif
libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions
CVE-2026-62291
Fix available
5.3 Medium
-
strukturag libheif
libheif: Integer underflow in Fraction constructor via double clap transform application
CVE-2026-62289
Fix available
4.3 Medium
-
strukturag libheif
libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check)
CVE-2026-50142
Public exploitFix available
7.5 High
-
struktur libheif
libheif: Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoder
CVE-2026-49271
Fix available
6.5 Medium
-
struktur libheif
libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow
CVE-2026-48029
Fix available
7.1 High
-
struktur libheif
libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation
CVE-2026-47714
Fix available
6.1 Medium
-
struktur libheif
libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe
CVE-2026-47709
Fix available
6.9 Medium
-
struktur libheif
libheif Has Heap Buffer Overflow in `Track::get_next_sample_raw_data()` -- OOB Chunk Vector Access
CVE-2026-47254
Fix available
6.1 Medium
-
struktur libheif
libheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data2
CVE-2026-47251
Fix available
6.8 Medium
-
struktur libheif
libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation
CVE-2026-47247
Fix available
7.5 High
-
struktur libheif
libheif has Heap Out Of Bounds Write in unci subsystem
CVE-2026-47178
Fix available
6.1 Medium
-
struktur libheif
libheif: Heap buffer over-read in SampleAuxInfoReader via crafted HEIF sequence file with mismatched saiz sample count
CVE-2026-41071
Fix available
5.1 Medium
-
struktur libheif
libheif allows Out-of-bounds vector access leading to invalid dereference (DoS)
CVE-2026-41069
Fix available
6.5 Medium
-
strukturag libheif, red hat enterprise linux 10 +1 more
libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride
CVE-2026-32882
Fix available
7.1 High
-
strukturag libheif, red hat enterprise linux 10 +1 more
libheif has a heap buffer overflow in decode_mask_image()
CVE-2026-32741
Fix available
7.1 High
-
strukturag libheif
libheif: Uninitialized Heap Memory Information Leak via Failed Grid Tiles
CVE-2026-32814
Fix available
6.5 Medium
-
struktur libheif, red hat enterprise linux 10 +1 more
libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing
CVE-2026-32740
Public exploitFix available
8.8 High
-
struktur libheif
libheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookup
CVE-2026-32739
Fix available
6.5 Medium
-
struktur libheif
libheif has a Heap OOB Read/SEGV Crash via Zero samples_per_chunk
CVE-2026-32738
Fix available
6.5 Medium
-
strukturag libheif
strukturag libheif stsz/stts track.cc load out-of-bounds
CVE-2026-3950
Fix available
4.8 Medium
-
strukturag libheif
strukturag libheif HEIF File decoder_vvdec.cc vvdec_push_data2 out-of-bounds
CVE-2026-3949
Fix available
4.8 Medium
-
struktur libheif
libheif has Potential Heap Buffer Over-Read
CVE-2025-68431
Fix available
6.5 Medium
-
struktur libheif
libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image...
CVE-2025-43967
Fix available
2.9 Low
-
struktur libheif
libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.
CVE-2025-43966
Fix available
2.9 Low
-
struktur libheif
There is a vulnerability in the strided image data parsing code in the emscripten wrapper for...
CVE-2023-0996
Fix available
7.8 High