Skip to content
OpenAdvisories

Package · Debian

libheif

47 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-84383 Public exploit

    libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items

    libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPixelImage::transfer_channel_from_image_as() append duplicate Alpha planes with d…

    strukturag libheif libheif Debian
  • High 7.5
    CVE-2026-50142 Public exploit

    libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check)

    libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted by heif_context_read_from_memory() with the msf1 sequence brand can cause unbounded heap allocation. In libheif/sequences/seq_boxes.cc, Box_…

    strukturag libheif libheif libheif Debian Ubuntu Alpine
  • High 8.8
    CVE-2026-32740 Public exploit

    libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing

    libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write 64 bytes of fully attacker-controlled data past the end of a…

    strukturag libheif libheif libheif Debian Ubuntu Alpine