Out-of-Bounds Read Vulnerability in libheif Image Decoder

CVE-2026-62292

What is CVE-2026-62292?

The libheif library, responsible for decoding HEIF and AVIF file formats, has a vulnerability that can lead to application crashes. When decoding crafted uncompressed HEIF images, specifically using the function heif_image_handle_decode_image_tile(), it is possible to create a scenario where a large tile offset is computed, causing an out-of-bounds read. This is due to an integer overflow in the offset calculation, which bypasses the necessary bounds checks and results in an invalid pointer being accessed. This vulnerability specifically requires tile decoding; simply opening a file does not trigger the issue. The problem has been resolved in version 1.23.1.

References