CVE-2026-84383

🗓️ 18 Sep 2026 15:55:46Reported by Debian Security Bug TrackerType

Heap overflow in scale_nearest_neighbor() via duplicate Alpha planes from nested iden/auxl items.

Reporter	Title	Published	Views	Family All 30
BDU FSTEC	The vulnerability of the scale_nearest_neighbor() function in the file format decoders and encoders of the libheif library allows a hacker to execute arbitrary code or cause a service failure.	10 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-84383	18 Sep 202617:00	–	circl
CVE	CVE-2026-84383	18 Sep 202615:55	–	cve
Cvelist	CVE-2026-84383 libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items	18 Sep 202615:55	–	cvelist
EUVD	EUVD-2026-83019	18 Sep 202615:55	–	euvd
Github Security Blog	sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545	8 Sep 202621:25	–	github
Tenable Nessus	Libheif 1.22.x < 1.23.2 Heap Buffer Overflow (macOS)	17 Sep 202600:00	–	nessus
Tenable Nessus	openSUSE 16: gdk-pixbuf-loader-libheif / libheif-aom / libheif-dav1d / etc (openSUSE-SU-2026:21889-1)	25 Sep 202600:00	–	nessus
Tenable Nessus	SUSE SLED15: gdk-pixbuf-loader-libheif / libheif-aom / libheif-dav1d / etc (SUSE-SU-2026:4276-1)	22 Sep 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-84383	5 Sep 202600:00	–	nessus