6.1
Moyenne
CVE-2026-47178 libheif is a HEIF and AVIF file format decoder and encoder
Description
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file (uncompressed `unci` codec, tiled, component-interleaved, 4:2:0) triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer of an adjacent `unc_decoder_component_interleave` object; the next virtual call dispatches to an attacker-chosen address. Version 1.22.0 patches the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libheif 1.19 | 1.19.0 → < 1.22.0 | 1.22.0 |
Autres CVE de libheif
Les 34 CVE de libheif →
CVE-2026-120208
libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in…
7.7
Élevée
CVE-2026-84450
libheif is a HEIF and AVIF file format decoder and encoder
4.3
Moyenne
CVE-2026-84449
libheif is a HEIF and AVIF file format decoder and encoder
3.7
Faible
CVE-2026-84451
libheif is a HEIF and AVIF file format decoder and encoder
6.5
Moyenne