UBUNTU-CVE-2026-32882

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay in libheif/pixelimage.cc. When compositing an overlay image iovl whose child image has a different bit depth for the alpha channel than for the color...

CVE-2025-68431

CVE-2025-68431 affects libheif prior to 1.21.0. A crafted HEIF can trigger a heap buffer over-read in HeifPixelImage::overlay() when an overlay path yields a negative row length, which underflows to size_t and causes a large read past the source plane, potentially crashing. A patch exists in 1.21...