CVE-2026-47178 libheif has Heap Out Of Bounds Write in unci subsystem

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file uncompressed unci codec, tiled, component-interleaved, 4:2:0 triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer o...

CVE-2026-47714 libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...

CVE-2026-47714

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...

CVE-2026-47714

The issue is a concrete, exploitable flaw in libheif up to version 1.21.2 (patched in 1.22.0) where inline mask size calculation in libheif/region.cc can overflow while parsing width and height as 32-bit unsigned ints. Their product can exceed UINT32_MAX, causing an undersized allocation and out-...

CVE-2026-47714 libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...

EUVD-2026-46434

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...

ROOT-OS-DEBIAN-13-CVE-2026-47178 CVE-2026-47178 in rootio-libheif - Patched by Root

Root has patched CVE-2026-47178 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32882 CVE-2026-32882 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32882 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32740 CVE-2026-32740 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32740 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-68431 CVE-2025-68431 in rootio-libheif - Patched by Root

Root has patched CVE-2025-68431 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32741 CVE-2026-32741 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32741 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32738 CVE-2026-32738 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32738 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-41071 CVE-2026-41071 in rootio-libheif - Patched by Root

Root has patched CVE-2026-41071 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32739 CVE-2026-32739 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32739 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-68431 CVE-2025-68431 in rootio-libheif - Patched by Root

Root has patched CVE-2025-68431 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32740 CVE-2026-32740 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32740 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-47178 CVE-2026-47178 in rootio-libheif - Patched by Root

Root has patched CVE-2026-47178 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32741 CVE-2026-32741 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32741 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32882 CVE-2026-32882 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32882 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-41071 CVE-2026-41071 in rootio-libheif - Patched by Root

Root has patched CVE-2026-41071 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...