CyberRota Analysis
AI-GeneratedThe inline mask parsing code in libheif versions up to 1.21.2 is vulnerable to an integer overflow due to improper handling of width and height values, which can lead to out-of-bounds memory access and potential exploitation. This vulnerability can affect applications that utilize libheif for processing HEIF and AVIF files, posing a risk of crashes or arbitrary code execution. Developers and organizations using libheif should prioritize upgrading to version 1.22.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in `libheif/region.cc` contains an integer overflow. Both `width` and `height` are `unsigned int` (32-bit) values parsed from the HEIF file. Their product can exceed `UINT32_MAX`, wrapping to a small value before the division by 8. This causes an undersized buffer allocation, leading to out-of-bounds memory access when the mask data is later interpreted as a `width x height` bitmap. Version 1.22.0 patches the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)