Heap Buffer Overflow Vulnerability in libheif HEIF and AVIF Decoder

CVE-2026-41071

What is CVE-2026-41071?

The libheif library, responsible for decoding HEIF and AVIF file formats, is susceptible to a heap buffer overflow due to improper validation of sample counts. When a specially crafted HEIF sequence file is processed, the saiz box may indicate more samples than exist in the corresponding chunk table, leading to an out-of-bounds read. This vulnerability arises during the file parsing process and can be exploited by applications utilizing libheif to open untrusted HEIF files. The issue has been addressed in version 1.22.0, which is recommended for all users.

References