Summary
Feng Ning discovered that libheif incorrectly handled certain image
transforms. A remote attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu
20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-62289)
Ali Firas discovered that libheif incorrectly handled certain images. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. This issue only affected Ubuntu 24.04 LTS.
(CVE-2026-62291)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | libheif | 1.17.6-1ubuntu4.8 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libheif | 1.1.0-2ubuntu0.1~esm4 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | libheif | 1.6.1-1ubuntu0.1~esm4 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | libheif | 1.12.0-2ubuntu0.1~esm4 |
Vulnerabilities 2
-
Medium 5.3
libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause attacker-controlled heap corruption during a normal decode and re-encode workflo…
-
Medium 4.3
libheif: Integer underflow in Fraction constructor via double clap transform application
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or AVIF file containing a clean aperture box can reduce an image dimension to zero and crash or corrupt tiling results when heif_image_handle_get_image_tiling(ha…