CVE-2026-114112: Sharp before 0.35.4 RCE via bundled libheif AVIF decoding
Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif decoding flaws to execute code.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Applications using npm/sharp before 0.35.4 on glibc-based Linux are exposed when they process untrusted AVIF or HEIF images.
What does an attacker need to exploit this issue?
An attacker needs a way to submit a crafted AVIF or HEIF image to an application that processes the input with a vulnerable sharp version. Successful exploitation may result in remote code execution during libheif decoding.
What is the remediation?
Upgrade sharp to version 0.35.4 or later. The issue is in the vulnerable bundled libheif dependency used by earlier sharp releases.