Search: CVE-2026-62292

CVE-2026-62292 is a high-severity out-of-bounds read vulnerability in the strukturag libheif library, affecting versions from 1.19.0 up to but not including 1.23.1. The flaw occurs when decoding a crafted uncompressed HEIF image with generic zlib unci full-item compression, specifically when decoding the last advertised tile. An integer overflow in tile offset calculation bypasses bounds checks, causing an invalid memory read and potential application crash. The issue is fixed in version 1.23.1.