CVE-2026-32814

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, when decoding a HEIF grid image with strictdecoding=false the default, a corrupted tile silently fails to decode and the library returns heiferrorOk with no indication of failure, leading to an uninitialized...

CVE-2026-32814 libheif: Uninitialized Heap Memory Information Leak via Failed Grid Tiles

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, when decoding a HEIF grid image with strictdecoding=false the default, a corrupted tile silently fails to decode and the library returns heiferrorOk with no indication of failure, leading to an uninitialized...

CVE-2026-32814

CVE-2026-32814 concerns the libheif HEIF/AVIF decoder. In versions up to 1.21.2, decoding a grid image with default strict_decoding=false could silently fail to decode a tile, returning heif_error_Ok while leaking uninitialized heap memory as pixel data (Y, Cb, Cr planes). The canvas is allocated...

Astra Linux - уязвимость в libheif

libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...

CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...

libheif 代码问题漏洞

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder from struktur open source. A code issue vulnerability exists in libheif versions prior to 1.19.6, which stems from a null pointer dereference in the ImageItemGrid::getdecoder function in image-items/grid.cc, as a grid image...

PT-2025-17423 · Libheif +1 · Libheif +1

Name of the Vulnerable Software and Affected Versions: libheif versions prior to 1.19.6 Description: The issue is caused by a NULL pointer dereference in ImageItem Grid::get decoder in image-items/grid.cc, which occurs when a grid image references a nonexistent image item. Recommendations: For...