CyberRota Analysis
AI-GeneratedThe vulnerability affects libheif versions 1.19.0 to 1.23.2, where crafted HEIF or AVIF files can exploit flaws in the decompress_brotli() and do_inflate() functions, leading to unbounded memory consumption and potential denial of service. This can allow attackers to create small files that exhaust system resources, causing the application to crash. Organizations using libheif for media processing should prioritize upgrading to version 1.23.2 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompress_brotli() and do_inflate() to grow accumulated output without an effective size limit or MemoryHandle accounting. The brotli path has no output bound, while the zlib path checks only a small temporary buffer in a branch that valid streams do not reach, and overlapping icef units can decompress the same payload repeatedly. HeifContext::interpret_heif_file_images() processes multiple compressed metadata items during file opening, allowing a small file to consume unbounded memory and terminate the process. This issue is fixed in version 1.23.2.