EUVD-2026-30982

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and below contain a heap buffer overflow in MaskImageCodec::decodemaskimage. When decoding a HEIF file containing a mask image mski, the function copies the full iloc extent data into a pixel buffer using memcpydst,...

PT-2026-42005

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.22.0 Description A heap buffer overflow exists in the MaskImageCodec::decode mask image function when decoding a HEIF file containing a mask image mski. The issue occurs because the function copies the full iloc...

CVE-2026-32741: Heap-based Buffer Overflow

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and below contain a heap buffer overflow in MaskImageCodec::decodemaskimage. When decoding a HEIF file containing a mask image mski, the function copies the full iloc extent data into a pixel buffer using memcpydst,...

libheif security vulnerabilities

LibHEIF is a open-source decoder and encoder for the ISO/IEC 23008-12:2017 HEIF file format developed by Struktur. Versions of LibHEIF prior to 1.21.2 contain security vulnerabilities. These vulnerabilities stem from a heap buffer overflow in the MaskImageCodec::decodemaskimage function, where no...

libheif:file_fuzzer: Heap-buffer-overflow in MaskImageCodec::decode_mask_image

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5211861302181888 Project: libheif Fuzzing Engine: honggfuzz Fuzz Target: filefuzzer Job Type: honggfuzzasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...