CyberRota Analysis
AI-GeneratedVersions 1.19.0 to 1.21.2 of libheif are vulnerable to a heap out-of-bounds read due to a tile-coordinate underflow in the ImageItem_Grid::decode_grid_tile function, potentially allowing attackers to access sensitive memory contents. This vulnerability poses a high risk, particularly for applications that utilize libheif for handling HEIF and AVIF file formats. Organizations using affected versions should prioritize upgrading to version 1.22.0 to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)