CVE-2026-62292

A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. A remote attacker could craft a malicious HEIF image that, when processed by an application decoding an advertised tile, could lead to an out-of-bounds read. This vulnerability occurs due to an integer overflow during...

CVE-2026-62289

A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. A remote attacker could exploit this vulnerability by providing a specially crafted HEIF or AVIF file containing a clean aperture box. This can lead to an integer underflow when processing image transformations, causing...

CVE-2026-50142

A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. A remote attacker can provide a specially crafted HEIF sequence that triggers an unbounded heap allocation. This occurs because the HEIF sequence parser's fixed-size mode is missing a bound check, and an integer...

Astra Linux – Vulnerability in libheif

In Libheif 1.17.6, insufficient checks during the decoding of a heif file using ImageOverlay::parse can lead to out-of-bounds read and write operations when processing a file containing an overlay image with forged offsets...

Astra Linux – Vulnerability in libheif

libheif is a decoder and encoder for HEIF and AVIF file formats. Prior to version 1.21.0, a crafted HEIF file that used overlay image item paths triggered a heap buffer overflow in HeifPixelImage::overlay. This function calculated a negative row length likely derived from an unclipped overlay...

Astra Linux – Vulnerability in libheif

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call...

Astra Linux – Vulnerability in libheif

libheif is a decoder and encoder for HEIF and AVIF file formats. In versions 1.21.2 and earlier, a crafted HEIF sequence file where the saiz box declares more samples than actually exist in the track’s chunk table could cause a heap-buffer-overflow out-of-bounds read in the SampleAuxInfoReader...

The vulnerability of the HeifPixelImage::copy_image_to() function in the libheif/pixelimage.cc decoder and file format parser allows a hacker to execute arbitrary code.

The vulnerability of the HeifPixelImage::copyimageto function in the libheif/pixelimage.cc decoder and file format parser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

ROOT-OS-DEBIAN-11-CVE-2026-41071 CVE-2026-41071 in libheif - Patched by Root

Root has patched CVE-2026-41071 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32814 CVE-2026-32814 in libheif - Patched by Root

Root has patched CVE-2026-32814 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32740 CVE-2026-32740 in libheif - Patched by Root

Root has patched CVE-2026-32740 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32739 CVE-2026-32739 in libheif - Patched by Root

Root has patched CVE-2026-32739 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32741 CVE-2026-32741 in libheif - Patched by Root

Root has patched CVE-2026-32741 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32882 CVE-2026-32882 in libheif - Patched by Root

Root has patched CVE-2026-32882 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-62292 CVE-2026-62292 in libheif - Patched by Root

Root has patched CVE-2026-62292 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-41069 CVE-2026-41069 in libheif - Patched by Root

Root has patched CVE-2026-41069 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-47178 CVE-2026-47178 in libheif - Patched by Root

Root has patched CVE-2026-47178 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-49271 CVE-2026-49271 in libheif - Patched by Root

Root has patched CVE-2026-49271 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-68431 CVE-2025-68431 in libheif - Patched by Root

Root has patched CVE-2025-68431 in the libheif package for Root:Debian:11. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-62291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alp...