Integer Overflow Vulnerability in libheif HEIF and AVIF Decoder

CVE-2026-47714

What is CVE-2026-47714?

The libheif library, responsible for decoding and encoding HEIF and AVIF file formats, is susceptible to an integer overflow flaw. This vulnerability arises in the inline mask parsing code found in libheif/region.cc. When handling image dimensions parsed from HEIF files, the width and height are defined as unsigned 32-bit integers. In scenarios where these values are large enough, their multiplication could exceed the maximum limit of UINT32_MAX, resulting in a wrapping effect. Consequently, this leads to an undersized buffer allocation, which can trigger out-of-bounds memory access during mask data processing. Users are encouraged to update to version 1.22.0 or later for resolution.

References