Medium severity6.5NVD Advisory· Published Jun 19, 2026· Updated Jun 26, 2026
CVE-2026-49271
CVE-2026-49271
Description
libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompressed HEIF decoder validates explicit icef compressed-unit offsets using unit_offset + unit_size. Because the addition can wrap, a crafted HEIF file can pass the range check and then construct a vector from iterators outside the compressed item buffer, producing an out-of-bounds heap read and crash. Version 1.22.1 patches the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:struktur:libheif:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:struktur:libheif:*:*:*:*:*:*:*:*range: <1.22.1
- (no CPE)range: <1.22.1
- osv-coords4 versionspkg:rpm/opensuse/libheif&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/libheif&distro=openSUSE%20Tumbleweedpkg:rpm/suse/libheif&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/libheif&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
< 1.23.0-160000.1.1+ 3 more
- (no CPE)range: < 1.23.0-160000.1.1
- (no CPE)range: < 1.23.0-2.1
- (no CPE)range: < 1.23.0-160000.1.1
- (no CPE)range: < 1.23.0-160000.1.1
Patches
Vulnerability mechanics
References
1- github.com/strukturag/libheif/security/advisories/GHSA-r7qj-cg5r-r6vfnvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.