UBUNTU-CVE-2026-120208: Buffer Overflow
libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile() that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craft a HEIF file declaring, for example, 16-bit Cb and 8-bit Cr to trigger file-controlled heap writes past the Cr plane, potentially achieving code execution in image-processing pipelines.
Affected Software
Event History
Frequently Asked Questions
Which systems are realistically exposed to this issue?
Systems that use affected libheif versions to process attacker-supplied HEIF files are exposed, particularly image-processing pipelines that decode HEIF content. The issue is triggered during processing of mixed-interleave image tiles.
What does an attacker need to exploit it?
An attacker needs to persuade a target to process a crafted HEIF file. The file must contain chroma components with unequal declared bit depths, such as 16-bit Cb and 8-bit Cr; no privileges are required, but user interaction is required.
What is the available remediation?
Update libheif to version 1.23.3 or later. The vulnerability affects libheif 1.18.0 through versions before 1.23.3.