CVE-2026-47714

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...

EUVD-2026-46434

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...

CVE-2026-47714 libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...

CVE-2026-47714 libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...

ROOT-OS-DEBIAN-13-CVE-2026-32814 CVE-2026-32814 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32814 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-47178 CVE-2026-47178 in rootio-libheif - Patched by Root

Root has patched CVE-2026-47178 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32738 CVE-2026-32738 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32738 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32739 CVE-2026-32739 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32739 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-41069 CVE-2026-41069 in rootio-libheif - Patched by Root

Root has patched CVE-2026-41069 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-49271 CVE-2026-49271 in rootio-libheif - Patched by Root

Root has patched CVE-2026-49271 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32814 CVE-2026-32814 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32814 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-41071 CVE-2026-41071 in rootio-libheif - Patched by Root

Root has patched CVE-2026-41071 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32741 CVE-2026-32741 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32741 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32739 CVE-2026-32739 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32739 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-49271 CVE-2026-49271 in rootio-libheif - Patched by Root

Root has patched CVE-2026-49271 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-47178 CVE-2026-47178 in rootio-libheif - Patched by Root

Root has patched CVE-2026-47178 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-41069 CVE-2026-41069 in rootio-libheif - Patched by Root

Root has patched CVE-2026-41069 in the rootio-libheif package for Root:Debian:11. Multiple fixed versions available...

Amazon Linux 2023 : heif-pixbuf-loader, libheif, libheif-devel (ALAS2023-2026-1971)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1971 advisory. Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation CVE-2026-47247 libheif crashes in the public C API heifimagehandlegetimagetiling when a malformed...

Important: libheif

Issue Overview: Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation CVE-2026-47247 libheif crashes in the public C API heifimagehandlegetimagetiling when a malformed uncompressed HEIF image item has an associated uncC property but no associated ispe property. In...

Amazon Linux 2023 : heif-pixbuf-loader, libheif, libheif-devel (ALAS2023-2026-1919)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1919 advisory. A critical heap-based buffer overflow vulnerability exists in libheif v1.21.2 and likely earlier versions within the handling of uncompressed HEIF images ISO/IEC 23001-17, unci item type. When...