{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3alibheif_projectlibheif/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:libheif_project:libheif:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-120208"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["libheif (1.18.0 to 1.23.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["libheif"],"content_html":"\u003cp\u003elibheif versions 1.18.0 through 1.23.2 are susceptible to a heap-based buffer overflow within the \u003ccode\u003eunc_decoder_mixed_interleave::processTile()\u003c/code\u003e function. The vulnerability is triggered when the library processes a maliciously crafted HEIF file that declares unequal bit depths for chroma components, such as a 16-bit Cb component combined with an 8-bit Cr component. This discrepancy causes an out-of-bounds write to the heap, which may result in application crashes or arbitrary code execution in the context of the processing pipeline.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may allow an unauthenticated attacker to execute arbitrary code within the memory space of an application leveraging the libheif library to decode images. Impact depends on the privileges of the application and the environment where image processing occurs.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the libheif library to version 1.23.3 or later across all applications and services that use the library for image processing.\u003c/li\u003e\n\u003cli\u003eAudit services (such as web servers, image hosting platforms, or content management systems) to identify instances where libheif is used to handle untrusted user-uploaded content.\u003c/li\u003e\n\u003cli\u003eImplement strict input validation or sandboxing for any image-processing pipelines utilizing older, unpatched versions of libheif.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-31T20:04:59Z","date_published":"2026-10-31T20:04:59Z","id":"https://feed.craftedsignal.io/briefs/2026-10-libheif-heap-overflow/","summary":"A heap-based buffer overflow vulnerability in libheif versions 1.18.0 through 1.23.2 allows out-of-bounds heap writes via crafted HEIF files with mismatched chroma bit depths, potentially facilitating arbitrary code execution.","title":"libheif: Heap-based buffer overflow in unc_decoder_mixed_interleave (CVE-2026-120208)","url":"https://feed.craftedsignal.io/briefs/2026-10-libheif-heap-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:libheif_project:libheif:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}