CVE-2026-47247

A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. This vulnerability allows a remote attacker to leak process heap memory by uploading a specially crafted AVIF or HEIC image file to a server-side image processor. The attacker can then recover sensitive heap data, such ...