Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

libheif — Vulnerabilities & Security Advisories 37

All 37 CVE vulnerabilities found in libheif, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses specifically affecting the libheif library, an open-source software product for handling HEIF image formats, categorized under various vulnerability types and tagged for efficient filtering. The collection encompasses a comprehensive range of issues including memory corruption, integer overflows, and denial-of-service flaws reported across multiple versions of the library from its initial release through the most recent security bulletins. Visitors can utilize this resource to track official vendor advisories regarding libheif updates, analyze the characteristics of specific weakness classes prevalent in image processing code, or review the complete historical record of vulnerabilities associated with this product to inform risk assessment and patch management strategies. The data presented here is derived from public security databases and vendor disclosures, providing a centralized view for researchers and system administrators seeking to understand the security posture of libheif without navigating fragmented sources. By consolidating these findings, the page facilitates a clearer understanding of how specific coding patterns in HEIF decoders and encoders have historically led to exploitable conditions, enabling more targeted remediation efforts and proactive hardening of systems relying on this library for image format support.

Vendor: Struktur

CVE ID Title CVSS Severity Published
CVE-2026-120208 libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder CWE-122 7.5 High 2026-10-31
CVE-2026-84450 libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289) CWE-617 4.3 Medium 2026-09-18
CVE-2026-84449 libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV CWE-190 3.7 Low 2026-09-18
CVE-2026-84451 libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read CWE-125 6.5 Medium 2026-09-18
CVE-2026-84447 libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS CWE-770 7.5 High 2026-09-18
CVE-2026-84384 libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS CWE-409 7.5 High 2026-09-18
CVE-2026-84444 libheif uncompressed tiled image encoding allows out-of-bounds write CWE-787 7.4 High 2026-09-18
CVE-2026-84383 libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items CWE-787 9.8 Critical 2026-09-18
CVE-2026-84446 libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames CWE-835 7.5 High 2026-09-18
CVE-2026-84448 libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image) CWE-125 4.0 Medium 2026-09-18
CVE-2026-62377 libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110) CWE-617 4.3 Medium 2026-08-18
CVE-2026-62291 libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions CWE-125 5.3 Medium 2026-08-18
CVE-2026-62292 libheif: Out-of-bounds read in uncompressed unci tile range slicing CWE-125 8.7 High 2026-08-18
CVE-2026-62289 libheif: Integer underflow in Fraction constructor via double clap transform application CWE-191 4.3 Medium 2026-08-18
CVE-2026-50142 libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check) CWE-190 7.5 High 2026-08-18
CVE-2026-48029 libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow CWE-125 7.1 High 2026-07-22
CVE-2026-47709 libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe CWE-476 - - 2026-07-21
CVE-2026-47254 libheif Has Heap Buffer Overflow in `Track::get_next_sample_raw_data()` -- OOB Chunk Vector Access CWE-125 6.1 Medium 2026-07-21
CVE-2026-47251 libheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data2 CWE-125 - - 2026-07-21
CVE-2026-47247 libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation CWE-200 7.5 High 2026-07-21
CVE-2026-47178 libheif has Heap Out Of Bounds Write in unci subsystem CWE-787 6.1 Medium 2026-07-21
CVE-2026-47714 libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation CWE-190 6.1 Medium 2026-07-21
CVE-2026-49271 libheif: Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoder CWE-125 6.5 Medium 2026-06-19
CVE-2026-41071 libheif: Heap buffer over-read in SampleAuxInfoReader via crafted HEIF sequence file with mismatched saiz sample count CWE-125 - - 2026-05-22
CVE-2026-41069 libheif allows Out-of-bounds vector access leading to invalid dereference (DoS) CWE-125 6.5 Medium 2026-05-22
CVE-2026-32882 libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride CWE-125 7.1 High 2026-05-19
CVE-2026-32741 libheif has a heap buffer overflow in decode_mask_image() CWE-122 7.1 High 2026-05-19
CVE-2026-32814 libheif: Uninitialized Heap Memory Information Leak via Failed Grid Tiles CWE-200 6.5 Medium 2026-05-19
CVE-2026-32740 libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing CWE-787 8.8 High 2026-05-19
CVE-2026-32739 libheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookup CWE-835 6.5 Medium 2026-05-19

All 37 known CVE vulnerabilities affecting libheif with full Chinese analysis, references, and POCs where available.