CVE-2025-62821

Microsoft HEIF Image Extensions msheifstore.dll: Source-buffer under-allocation in CopyPixels path leads to out-of-bounds read and Access Violation DoS When decoding a crafted HEIF image through WIC, the msheif codec allocates a 1-byte source buffer but later attempts to copy a very large amount ...

CVE-2026-58868

CVE-2026-58868 A HEIF Grid Mismatch in Android's Media Decoder Hey everyone, this is my first post, so if you spot any mistakes, please let me know. I don't usually write about my CVEs, but with Harry Kane finally winning the Ballon d'Or and extending his contract with Bayern felt like a good...

Important: libheif

Issue Overview: libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craft a HEIF file declaring, for example,...

libheif: Multiple Vulnerabilities

Background libheif is an ISO/IEC 23008-12 HEIF and AVIF AV1 Image File Format file format decoder and encoder. HEIC and AVIF are new image file formats employing HEVC H.265 or AV1 image coding, respectively, for the best compression ratios currently possible. Description Multiple vulnerabilities...

CVE-2026-100204

Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally...

CVE-2026-100204

A Use after free vulnerability exists in the HEIF Image Extensions component, which may allow an unauthorized attacker to execute code locally . The vulnerability has a HIGH base severity score of 7.0 (CVSS v3.1) and requires local access and user interaction. Exploitation details or specific pro...

EUVD-2026-121721

Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally...

HEIF Image Extensions Remote Code Execution Vulnerability

Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally...

PT-2026-143278

Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally...

USN-9012-1 libheif vulnerability

Alex Thomas discovered that libheif incorrectly handled certain HEIF images. An attacker could possibly use this issue to execute arbitrary code if a user or automated system were tricked into opening a specially crafted file...

Exploit for CVE-2026-58868

CVE-2026-58868 A HEIF Grid Mismatch in Android's Media Decoder...

[SECURITY] Fedora 43 Update: libheif-1.23.7-1.fc43

libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF AV1 Image File Format file format decoder and encoder...

Linux Distros Unpatched Vulnerability : CVE-2026-120208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile that allows attackers to write out of...

CVE-2026-120208

libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craft a HEIF file declaring, for example, 16-bit Cb and 8-b...

CVE-2026-120208

libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craft a HEIF file declaring, for example, 16-bit Cb and 8-b...

UBUNTU-CVE-2026-120208

libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craft a HEIF file declaring, for example, 16-bit Cb and 8-b...

CVE-2026-120208

A flaw was found in libheif. This vulnerability allows a remote attacker to achieve arbitrary code execution or cause a denial of service DoS by supplying a specially crafted High Efficiency Image File Format HEIF image. Due to improper handling of color components with unequal bit depths in the...

CVE-2026-120208 libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder

libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craft a HEIF file declaring, for example, 16-bit Cb and 8-b...

CVE-2026-120208

The libheif library (versions 1.18.0 before 1.23.3) is vulnerable to a heap-based buffer overflow in the unc_decoder_mixed_interleave::processTile() function. The flaw is caused by the improper handling of color components with unequal bit depths during the processing of uncompressed images. An a...

CVE-2026-120208 libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder

libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craft a HEIF file declaring, for example, 16-bit Cb and 8-b...