libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade libheifUpgrade heif-pixbuf-loader-debuginfoUpgrade heif-pixbuf-loaderUpgrade libheif-debuginfoUpgrade libheif-debugsourceUpgrade libheif-tools-debuginfoUpgrade libheif-develUpgrade libheif-tools | Jul 23, 2026 | Jul 22, 2026 |
| Debian | — | Upgrade libheif | Aug 9, 2026 | Aug 9, 2026 |
| Ubuntu | — | Upgrade libheif-plugin-jpegencUpgrade libheif1Upgrade libheif-plugins-allUpgrade libheif-plugin-jpegdecUpgrade libheif-plugin-libde265Upgrade libheif-plugin-aomencUpgrade libheif-plugin-x265Upgrade libheif-plugin-ffmpegdecUpgrade libheif-plugin-rav1eUpgrade heif-viewUpgrade libheif-plugin-dav1dUpgrade libheif-plugin-j2kencUpgrade heif-thumbnailerUpgrade heif-gdk-pixbufUpgrade libheif-devUpgrade libheif-plugin-aomdecUpgrade libheif-examplesUpgrade libheif-plugin-kvazaarUpgrade libheif-plugin-svtencUpgrade libheif-plugin-j2kdec | Jul 12, 2026 | Jul 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub