Vulnerabilities

TI-2026-83558 CVE-2026-120208 · GHSA-wqmc-6h9q-v6wp

Heap buffer overflow in libheif mixed-interleave decoder

LOW 36

libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::processTile() that allows attackers to write out of bounds by supplying chroma components with unequal bit…

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00365 Published 2026-10-31 Fixed in 1.23.3 CWE-122

TI-2026-58040 CVE-2026-84450

libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289)

LOW 20

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00284 Published 2026-09-18 Fixed in 1.23.3 CWE-617

TI-2026-58039 CVE-2026-84449

libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV

MEDIUM 51

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00416 Published 2026-09-18 Fixed in 1.19.6 CWE-125

TI-2026-58041 CVE-2026-84451

libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read

LOW 29

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00311 Published 2026-09-18 Fixed in 1.23.3 CWE-125

TI-2026-58037 CVE-2026-84447

Resource allocation without limits in strukturag libheif

HIGH 72

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00517 Published 2026-09-18 Fixed in 1.23.2 CWE-770

TI-2026-57995 CVE-2026-84384

libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS

HIGH 72

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00517 Published 2026-09-18 Fixed in 1.23.2 CWE-409

TI-2026-58034 CVE-2026-84444

libheif uncompressed tiled image encoding allows out-of-bounds write

HIGH 66

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00478 Published 2026-09-18 Fixed in 1.23.2 CWE-787

TI-2026-57994 CVE-2026-84383

libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items

HIGH 82

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00717 Published 2026-09-18 Fixed in 1.23.2 CWE-787

TI-2026-58036 CVE-2026-84446

Infinite loop in strukturag libheif

LOW 39

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00458 Published 2026-09-18 Fixed in 1.23.2 CWE-835

TI-2026-58038 CVE-2026-84448

Out-of-bounds read in strukturag libheif

MEDIUM 52

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00186 Published 2026-09-18 Fixed in 1.23.2 CWE-125

TI-2026-39143 CVE-2026-54241

libde265: SAO sequential filter heap buffer overflow via signed integer overflow

LOW 33

libde265 is an open source implementation of the h.265 video codec.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00393 Published 2026-09-11 Fixed in 1.1.1 CWE-122

TI-2026-39142 CVE-2026-54240

libde265: Pixel accessor signed integer overflow causes heap OOB read/write

LOW 33

libde265 is an open source implementation of the h.265 video codec.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00393 Published 2026-09-11 Fixed in 1.1.1 CWE-190

TI-2026-44517 CVE-2026-62377

Reachable assertion in strukturag libheif

LOW 20

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00413 Published 2026-08-18 Fixed in 1.23.1 CWE-617

TI-2026-44480 CVE-2026-62291

Out-of-bounds read in strukturag libheif

MEDIUM 57

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00187 Published 2026-08-18 Fixed in 1.23.1 CWE-125

TI-2026-44481 CVE-2026-62292

libheif: Out-of-bounds read in uncompressed unci tile range slicing

HIGH 71

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00562 Published 2026-08-18 Fixed in 1.23.1 CWE-125

TI-2026-44478 CVE-2026-62289

libheif: Integer underflow in Fraction constructor via double clap transform application

LOW 20

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00302 Published 2026-08-18 Fixed in 1.23.1 CWE-191

TI-2026-36912 CVE-2026-50142

libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check)

MEDIUM 40

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00655 Published 2026-08-18 Fixed in 1.23.0 CWE-190

TI-2026-35472 CVE-2026-48029

libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow

MEDIUM 64

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00359 Published 2026-07-22 Fixed in 1.22.0 CWE-125

TI-2026-35212 CVE-2026-47709

libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe

MEDIUM 64

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00183 Published 2026-07-21 Fixed in 1.22.0 CWE-476

TI-2026-34837 CVE-2026-47254

libheif Has Heap Buffer Overflow in `Track::get_next_sample_raw_data()` -- OOB Chunk Vector Access

LOW 26

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00161 Published 2026-07-21 Fixed in 1.22.0 CWE-125

TI-2026-34834 CVE-2026-47251

libheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data2

MEDIUM 63

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00159 Published 2026-07-21 Fixed in 1.22.0 CWE-125

TI-2026-34830 CVE-2026-47247

libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation

HIGH 72

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00479 Published 2026-07-21 Fixed in 1.22.0 CWE-200

TI-2026-34767 CVE-2026-47178

libheif has Heap Out Of Bounds Write in unci subsystem

LOW 33

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00183 Published 2026-07-21 Fixed in 1.22.0 CWE-787

TI-2026-35215 CVE-2026-47714

libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation

LOW 26

libheif is a HEIF and AVIF file format decoder and encoder.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00153 Published 2026-07-21 Fixed in 1.22.0 CWE-190

TI-2026-33173 CVE-2026-45383

Out-of-bounds read in strukturag libde265

LOW 37

libde265 is an open source implementation of the h.265 video codec.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00426 Published 2026-07-21 Fixed in 1.0.19 CWE-125

Vulnerabilities

Filters