8 matches found
EUVD-2026-83019
libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPixelImage::transferchannelfromimageas append duplicate Alpha planes with different bit depths to mstorage...
CVE-2026-84383
libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPixelImage::transferchannelfromimageas append duplicate Alpha planes with different bit depths to mstorage...
CVE-2026-84383 libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items
libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPixelImage::transferchannelfromimageas append duplicate Alpha planes with different bit depths to mstorage...
CVE-2026-84383
libheif, a HEIF and AVIF decoder/encoder, is affected by a heap out-of-bounds write (CVSS 9.8 Critical) in versions 1.22.0 through 1.23.2. A crafted item graph using nested iden and auxl references causes scale_nearest_neighbor() to write 16-bit samples into an 8-bit Alpha plane allocation, with ...
Libheif 1.22.x < 1.23.2 Heap Buffer Overflow (macOS)
According to its self-reported version, libheif on the remote host is 1.22.0 or later and prior to 1.23.2. It is, therefore, affected by a heap buffer overflow vulnerability. A crafted HEIC/HEIF/AVIF file using nested identity derivation iden and auxiliary auxl item references causes...
Linux Distros Unpatched Vulnerability : CVE-2026-84383
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - GHSA-g89c-p67h-r497: Heap buffer overflow in scalenearestneighbor via duplicate Alpha planes from nested iden/auxl items CVE-2026-84383 Note that...
