CVE-2026-32882: Out-of-bounds Read

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay in libheif/pixelimage.cc. When compositing an overlay image iovl whose child image has a different bit depth for the alpha channel than for the color...

PT-2026-36267

libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in HeifPixelImage::overlay. The function computes a negative row length likely from an unclipped overlay rectangle or...

Security update for libheif

This update for libheif fixes the following issues: CVE-2025-68431: Fixed heap buffer over-read in HeifPixelImage::overlay via crafted HEIF that exercises the overlay image item bsc1255735 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Security update for libheif (moderate)

openSUSE security update: security update for libheif ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20076-1 Rating: moderate References: bsc1255735 Cross-References: CVE-2025-68431 CVSS scores: CVE-2025-68431 SUSE : 5.5...

SUSE-SU-2026:20121-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2025-68431: heap buffer over-read in HeifPixelImage::overlay via crafted HEIF file that exercises the overlay image item path bsc1255735...

CVE-2025-68431: Out-of-bounds Read

libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path triggers a heap buffer over-read in HeifPixelImage::overlay. The function computes a negative row length likely from an unclipped overlay rectangle or...

libheif:file_fuzzer: Memcpy-param-overlap in HeifPixelImage::overlay

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=6093792387334144 Project: libheif Fuzzing Engine: honggfuzz Fuzz Target: filefuzzer Job Type: honggfuzzasanlibheif Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

libheif:file_fuzzer: Crash in HeifPixelImage::overlay

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4759237937135616 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: filefuzzer Job Type: libfuzzerubsanlibheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5565238db003 Crash...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in HeifPixelImage::overlay

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4849915344257024 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderheicfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ Cra...

libheif:file_fuzzer: Crash in HeifPixelImage::overlay

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5072436592508928 Project: libheif Fuzzing Engine: afl Fuzz Target: filefuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x453de8a42800 Crash State:...