The vulnerability of the Track::load() function in the stsz/stts component of the file format decoder and encoder library libheif allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Track::load function in the stsz/stts component of the file format decoder and encoder library libheif is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

CVE-2026-3950

A vulnerability was identified in strukturag libheif up to 1.21.2. This impacts the function Track::load of the file libheif/sequences/track.cc of the component stsz/stts. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploit is publicly available and...