CVE-2026-84383

A critical heap buffer overflow vulnerability exists in libheif versions 1.22.0 through 1.23.1. When decoding a maliciously crafted HEIF, HEIC, or AVIF file using nested iden and auxl references, HeifPixelImage::transferchannelfromimageas can inappropriately append duplicate Alpha planes with...

CVE-2026-84383 libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items

libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPixelImage::transferchannelfromimageas append duplicate Alpha planes with different bit depths to mstorage...

CVE-2026-84383: Out-of-bounds Write

libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPixelImage::transferchannelfromimageas append duplicate Alpha planes with different bit depths to mstorage...