libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write 64 bytes of fully attacker-controlled data past the end of a chroma plane heap allocation by crafting a HEIF/AVIF file with a 1×4 grid of odd-height tiles. The overflow is triggered during normal image decoding with default build configuration. The written bytes are chroma (Cb/Cr) pixel values from the attacking tile, giving the attacker full control over the overflow content. This issue has been fixed in version 1.22.0.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libheif | Jun 18, 2026 | May 19, 2026 |
| Amazon_linux_2023 | — | Upgrade libheifUpgrade libheif-toolsUpgrade libheif-develUpgrade libheif-debugsourceUpgrade heif-pixbuf-loader-debuginfoUpgrade libheif-tools-debuginfoUpgrade libheif-debuginfoUpgrade heif-pixbuf-loader | Jun 9, 2026 | May 19, 2026 |
| Debian | — | Upgrade libheif | Aug 9, 2026 | Aug 9, 2026 |
| Ubuntu | — | Upgrade heif-thumbnailer (Ubuntu Pro)Upgrade libheif-dev (Ubuntu Pro)Upgrade libheif-plugins-allUpgrade libheif-plugin-svtencUpgrade libheif-devUpgrade heif-gdk-pixbuf (Ubuntu Pro)Upgrade libheif-plugin-x265Upgrade libheif-plugin-aomdecUpgrade libheif-plugin-dav1dUpgrade libheif-plugin-jpegencUpgrade libheif-plugin-j2kencUpgrade libheif-plugin-ffmpegdecUpgrade libheif1Upgrade libheif-plugin-j2kdecUpgrade libheif1 (Ubuntu Pro)Upgrade heif-gdk-pixbufUpgrade heif-thumbnailerUpgrade libheif-plugin-libde265Upgrade libheif-plugin-rav1eUpgrade libheif-plugin-kvazaarUpgrade heif-viewUpgrade libheif-plugin-aomencUpgrade libheif-plugin-jpegdec | Jun 21, 2026 | Jun 18, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub