CVE-2026-84383: Out-of-bounds Write

libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPixelImage::transferchannelfromimageas append duplicate Alpha planes with different bit depths to mstorage...

The vulnerability of the HeifPixelImage::copy_image_to() function in the libheif/pixelimage.cc decoder and file format parser allows a hacker to execute arbitrary code.

The vulnerability of the HeifPixelImage::copyimageto function in the libheif/pixelimage.cc decoder and file format parser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2026-32882: Out-of-bounds Read

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay in libheif/pixelimage.cc. When compositing an overlay image iovl whose child image has a different bit depth for the alpha channel than for the color...

Security update for libheif

This update for libheif fixes the following issues: CVE-2025-68431: Fixed heap buffer over-read in HeifPixelImage::overlay via crafted HEIF that exercises the overlay image item bsc1255735 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Security update for libheif (moderate)

openSUSE security update: security update for libheif ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20076-1 Rating: moderate References: bsc1255735 Cross-References: CVE-2025-68431 CVSS scores: CVE-2025-68431 SUSE : 5.5...

SUSE-SU-2026:20121-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2025-68431: heap buffer over-read in HeifPixelImage::overlay via crafted HEIF file that exercises the overlay image item path bsc1255735...

Security update for libheif

This update for libheif fixes the following issues: CVE-2025-68431: Fixed heap buffer over-read in HeifPixelImage::overlay via crafted HEIF that exercises the overlay image item bsc1255735 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

CVE-2025-68431: Out-of-bounds Read

libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in HeifPixelImage::overlay. The function computes a negative row length likely from an unclipped overlay rectangle or...

OSV-2020-1260 Negative-size-param in heif::HeifPixelImage::fill_RGB_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13563 Crash type: Negative-size-param Crash state: heif::HeifPixelImage::fillRGB16bit heif::HeifContext::decodeoverlayimage heif::HeifContext::decodeimage...

imagemagick/encoder_heic_fuzzer: Stack-buffer-overflow in std::__1::shared_ptr<heif::HeifPixelImage>::~shared_ptr

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5638446846050304 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

libheif/file-fuzzer: Negative-size-param in heif::HeifPixelImage::fill_RGB_16bit

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5732616832024576 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Negative-size-param Crash...