Skip to content
OpenAdvisories
High ALAS2023-2026-1971 4 CVEs

Important: libheif security update (Amazon Linux 2023)

Published Jul 20, 2026 · Updated Jul 20, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-48029: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow CVE-2026-47714: Integer overflow in inline mask size calculation causes undersized buffer allocation CVE-2026-47709: libheif crashes in the public C API heif_image_handle_get_image_tiling() when a malformed uncompressed HEIF image item has an associated uncC property but no associated ispe property. In debug builds this trips the ispe && uncC assertion in ImageItem_uncompressed::get_heif_image_tiling(). In a release/NDEBUG ASan build, the same file causes a null pointer read at address 0xa8. CVE-2026-47247: Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation

Fixed packages 8

ReleasePackageFixed in
Amazon Linux · 2023 heif-pixbuf-loader 0:1.19.8-1.amzn2023.0.7
Amazon Linux · 2023 heif-pixbuf-loader-debuginfo 0:1.19.8-1.amzn2023.0.7
Amazon Linux · 2023 libheif 0:1.19.8-1.amzn2023.0.7
Amazon Linux · 2023 libheif-debuginfo 0:1.19.8-1.amzn2023.0.7
Amazon Linux · 2023 libheif-debugsource 0:1.19.8-1.amzn2023.0.7
Amazon Linux · 2023 libheif-devel 0:1.19.8-1.amzn2023.0.7
Amazon Linux · 2023 libheif-tools 0:1.19.8-1.amzn2023.0.7
Amazon Linux · 2023 libheif-tools-debuginfo 0:1.19.8-1.amzn2023.0.7

Vulnerabilities 4

  • High 7.5
    CVE-2026-47247

    libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation

    libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side imag…

    strukturag libheif libheif libheif Debian Ubuntu
  • High 7.1
    CVE-2026-48029

    libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow

    libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue.

    strukturag libheif libheif libheif Debian Ubuntu
  • Medium 6.9
    CVE-2026-47709

    libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe

    libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API `heif_image_handle_get_image_tiling()` when a malformed uncompressed HEIF image item has an associated `uncC` property but no associated `ispe` pr…

    strukturag libheif libheif libheif Debian Ubuntu
  • Medium 6.1
    CVE-2026-47714

    libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation

    libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in `libheif/region.cc` contains an integer overflow. Both `width` and `height` are `unsigned int` (32-bit) values parsed from the HEIF file.…

    strukturag libheif libheif libheif Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-47247.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-47709.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-47714.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-48029.html