Skip to main content
VulnerabilityPublished Updated

HeifPixelImage::overlay · Libheif: UNKNOWN READ

Affects libheifSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 7 Sep 2026, 17:04 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzlibheifpkg:generic/libheifOther threatsAffected
  • >=8bec5d258e1e6a1a9a6b04fd15716925cceadd17
  • =v1.16.2
  • =v1.17.0
  • =v1.17.1
  • =v1.17.2
  • =v1.17.3
  • =v1.17.4
  • =v1.17.5
  • =v1.17.6
  • =v1.18.0-rc1
  • =v1.18.0
  • =v1.18.1
  • =v1.18.2
  • =v1.19.0
  • =v1.19.1
  • =v1.19.2
  • =v1.19.3
  • =v1.19.4
  • =v1.19.5
  • =v1.19.6
  • =v1.19.7
  • =v1.19.8
  • =v1.20.0
  • =v1.20.1
  • =v1.20.2
  • =v1.21.0
  • =v1.21.1
  • =v1.21.2
  • =v1.22.0
  • =v1.22.1
  • =v1.22.2
  • =v1.23.0
  • =v1.23.1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, users should exercise caution when processing untrusted HEIF images with affected versions of libheif.

Description

A medium severity vulnerability in libheif was reported by OSS-Fuzz involving an unknown read error in the HeifPixelImage::overlay function. The issue causes a crash during image overlay processing in the HEIF image decoding workflow. Multiple specific versions of libheif are affected, but no patch or fix information is currently provided.

References

Community reviews

Loading reviews…