Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

libheif HEIF File Decoder Crashes with Malformed Files

published 3 months ago
Summary

A bug in the libheif library can cause it to crash when decoding certain types of HEIF files. This is a security issue because an attacker could create a file designed to trigger this crash. To fix this, update libheif to version 1.22.1 or later.

What to do
  • Update juliabinarywrappers libheif_jll to version 1.22.2000+0.
Affected software
Ecosystem VendorProductAffected versions
Julia juliabinarywrappers libheif_jll < 1.22.2000+0
Fix: upgrade to 1.22.2000+0
Original advisory text
libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompressed HEIF decoder validates explicit icef compressed-unit offsets using `unit_offset` + `unit_size`....
libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompressed HEIF decoder validates explicit icef compressed-unit offsets using `unit_offset` + `unit_size`. Because the addition can wrap, a crafted HEIF file can pass the range check and then construct a vector from iterators outside the compressed item buffer, producing an out-of-bounds heap read and crash. Version 1.22.1 patches the issue.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.5 Medium
Timeline
Published3 Aug 2026
Updated3 Aug 2026
First seen3 Aug 2026
Sources
JLSEC-2026-1101 · OSV
Track software like this
Free during beta