{"schema_version":1,"title":"struktur AG Libheif vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 20 vulnerabilities in struktur AG Libheif: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-84384, was published on 18 September 2026.","url":"https://junglewise.ai/threats/technologies/libheif","json_url":"https://junglewise.ai/threats/technologies/libheif.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/libheif","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":7,"all_time":20,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":3,"last_90_days":11,"last_365_days":20},"latest":[{"cve":"CVE-2026-84384","cvss":7.5,"epss":0.0061,"slug":"cve-2026-84384-libheif-is-a-heif-and-avif-file-format-decoder-and-encoder-from-1","title":"libheif decompression bomb via brotli/zlib metadata","severity":"high","exploited":false,"published_at":"2026-09-18T16:17:11.9+00:00","url":"https://junglewise.ai/threats/cve-2026-84384-libheif-is-a-heif-and-avif-file-format-decoder-and-encoder-from-1"},{"cvss":8.9,"slug":"sharp-heap-based-buffer-overflow-via-libheif-image-parsing-6451a83e","title":"sharp heap-based buffer overflow via libheif image parsing","severity":"high","exploited":false,"published_at":"2026-09-08T21:25:11+00:00","url":"https://junglewise.ai/threats/sharp-heap-based-buffer-overflow-via-libheif-image-parsing-6451a83e"},{"cvss":4,"slug":"sharp-remote-code-execution-via-malformed-heif-image-32a48ae6","title":"sharp remote code execution via malformed HEIF image","severity":"medium","exploited":false,"published_at":"2026-09-08T21:25:11+00:00","url":"https://junglewise.ai/threats/sharp-remote-code-execution-via-malformed-heif-image-32a48ae6"},{"cvss":9.8,"slug":"next-js-and-libheif-rce-in-heif-avif-image-processing-eebb5345","title":"Next.js and libheif RCE in HEIF/AVIF image processing","severity":"info","exploited":false,"published_at":"2026-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/next-js-and-libheif-rce-in-heif-avif-image-processing-eebb5345"},{"cve":"CVE-2026-48029","cvss":7.1,"slug":"cve-2026-48029-strukturag-libheif-heap-oob-read-in-imageitem-grid-decode-grid","title":"Strukturag libheif heap OOB read in ImageItem_Grid::decode_grid_tile","severity":"high","exploited":false,"published_at":"2026-07-22T15:17:18.357+00:00","url":"https://junglewise.ai/threats/cve-2026-48029-strukturag-libheif-heap-oob-read-in-imageitem-grid-decode-grid"},{"cve":"CVE-2026-47709","cvss":6.9,"slug":"cve-2026-47709-strukturag-libheif-null-pointer-dereference-in-heif-image-handle","title":"Strukturag libheif NULL pointer dereference in heif_image_handle_get_image_tiling","severity":"info","exploited":false,"published_at":"2026-07-21T22:17:13.097+00:00","url":"https://junglewise.ai/threats/cve-2026-47709-strukturag-libheif-null-pointer-dereference-in-heif-image-handle"},{"cve":"CVE-2026-47254","cvss":6.1,"slug":"cve-2026-47254-strukturag-libheif-heap-buffer-overflow-in-track-sequence","title":"Strukturag libheif heap buffer overflow in Track sequence handling","severity":"medium","exploited":false,"published_at":"2026-07-21T22:17:12.957+00:00","url":"https://junglewise.ai/threats/cve-2026-47254-strukturag-libheif-heap-buffer-overflow-in-track-sequence"},{"cve":"CVE-2026-47251","cvss":6.8,"slug":"cve-2026-47251-libheif-integer-overflow-in-vvdec-push-data2","title":"libheif integer overflow in vvdec_push_data2","severity":"info","exploited":false,"published_at":"2026-07-21T22:17:12.8+00:00","url":"https://junglewise.ai/threats/cve-2026-47251-libheif-integer-overflow-in-vvdec-push-data2"},{"cve":"CVE-2026-47247","cvss":7.5,"slug":"cve-2026-47247-strukturag-libheif-heap-information-disclosure-in-grid-image","title":"Strukturag libheif heap information disclosure in grid image decoding","severity":"high","exploited":false,"published_at":"2026-07-21T22:17:12.643+00:00","url":"https://junglewise.ai/threats/cve-2026-47247-strukturag-libheif-heap-information-disclosure-in-grid-image"},{"cve":"CVE-2026-47178","cvss":6.1,"slug":"cve-2026-47178-strukturag-libheif-heap-out-of-bounds-write-in-uncompressed-tile","title":"Strukturag libheif heap out-of-bounds write in uncompressed tile decoder","severity":"medium","exploited":false,"published_at":"2026-07-21T22:17:12.503+00:00","url":"https://junglewise.ai/threats/cve-2026-47178-strukturag-libheif-heap-out-of-bounds-write-in-uncompressed-tile"},{"cve":"CVE-2026-47714","cvss":6.1,"slug":"cve-2026-47714-strukturag-libheif-integer-overflow-in-region-cc-mask-parsing","title":"Strukturag libheif integer overflow in region.cc mask parsing","severity":"medium","exploited":false,"published_at":"2026-07-21T21:16:51.617+00:00","url":"https://junglewise.ai/threats/cve-2026-47714-strukturag-libheif-integer-overflow-in-region-cc-mask-parsing"},{"cve":"CVE-2026-49271","cvss":6.5,"slug":"cve-2026-49271-libheif-out-of-bounds-read-in-uncompressed-heif-decoder","title":"libheif out-of-bounds read in uncompressed HEIF decoder","severity":"medium","exploited":false,"published_at":"2026-06-19T18:16:19.353+00:00","url":"https://junglewise.ai/threats/cve-2026-49271-libheif-out-of-bounds-read-in-uncompressed-heif-decoder"},{"cve":"CVE-2026-41071","cvss":5.1,"epss":0.0004,"slug":"cve-2026-41071-strukturag-libheif-heap-buffer-over-read-in-sampleauxinforeader","title":"Strukturag libheif heap buffer over-read in SampleAuxInfoReader","severity":"info","exploited":false,"published_at":"2026-05-22T22:16:55.47+00:00","url":"https://junglewise.ai/threats/cve-2026-41071-strukturag-libheif-heap-buffer-over-read-in-sampleauxinforeader"},{"cve":"CVE-2026-41069","cvss":6.5,"epss":0.0004,"slug":"cve-2026-41069-strukturag-libheif-out-of-bounds-read-in-sampleauxinforeader","title":"Strukturag libheif out-of-bounds read in SampleAuxInfoReader","severity":"medium","exploited":false,"published_at":"2026-05-22T21:16:43.327+00:00","url":"https://junglewise.ai/threats/cve-2026-41069-strukturag-libheif-out-of-bounds-read-in-sampleauxinforeader"},{"cve":"CVE-2026-32882","cvss":7.1,"slug":"cve-2026-32882-libheif-heap-buffer-over-read-in-heifpixelimage-overlay","title":"libheif heap buffer over-read in HeifPixelImage::overlay","severity":"high","exploited":false,"published_at":"2026-05-19T21:16:42.363+00:00","url":"https://junglewise.ai/threats/cve-2026-32882-libheif-heap-buffer-over-read-in-heifpixelimage-overlay"},{"cve":"CVE-2026-32814","cvss":6.5,"slug":"cve-2026-32814-strukturag-libheif-uninitialized-heap-memory-leak-in-grid-image","title":"Strukturag libheif uninitialized heap memory leak in grid image decoding","severity":"medium","exploited":false,"published_at":"2026-05-19T21:16:42.223+00:00","url":"https://junglewise.ai/threats/cve-2026-32814-strukturag-libheif-uninitialized-heap-memory-leak-in-grid-image"},{"cve":"CVE-2026-32741","cvss":7.1,"slug":"cve-2026-32741-strukturag-libheif-heap-buffer-overflow-in-maskimagecodec","title":"Strukturag libheif heap buffer overflow in MaskImageCodec","severity":"high","exploited":false,"published_at":"2026-05-19T21:16:42.073+00:00","url":"https://junglewise.ai/threats/cve-2026-32741-strukturag-libheif-heap-buffer-overflow-in-maskimagecodec"},{"cve":"CVE-2026-32740","cvss":8.8,"slug":"cve-2026-32740-strukturag-libheif-heap-buffer-overflow-in-grid-tile-compositing","title":"Strukturag libheif heap buffer overflow in grid tile compositing","severity":"high","exploited":false,"published_at":"2026-05-19T20:16:18.917+00:00","url":"https://junglewise.ai/threats/cve-2026-32740-strukturag-libheif-heap-buffer-overflow-in-grid-tile-compositing"},{"cve":"CVE-2026-32739","cvss":6.5,"slug":"cve-2026-32739-strukturag-libheif-infinite-loop-in-box-stts-get-sample-duration","title":"Strukturag libheif infinite loop in Box_stts::get_sample_duration","severity":"medium","exploited":false,"published_at":"2026-05-19T20:16:18.78+00:00","url":"https://junglewise.ai/threats/cve-2026-32739-strukturag-libheif-infinite-loop-in-box-stts-get-sample-duration"},{"cve":"CVE-2026-32738","cvss":6.5,"slug":"cve-2026-32738-strukturag-libheif-denial-of-service-via-integer-underflow-in","title":"Strukturag libheif denial of service via integer underflow in stsc box","severity":"medium","exploited":false,"published_at":"2026-05-19T19:16:48.823+00:00","url":"https://junglewise.ai/threats/cve-2026-32738-strukturag-libheif-denial-of-service-via-integer-underflow-in"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"struktur AG Libde265","slug":"libde265","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/libde265"}],"technology":{"hub":true,"name":"struktur AG Libheif","slug":"libheif","vendor":{"name":"struktur AG","slug":"struktur-ag","url":"https://junglewise.ai/threats/vendors/struktur-ag"},"aliases":[],"category":"library","homepage":"https://github.com/strukturag/libheif","repo_url":"https://github.com/strukturag/libheif","description":"An ISO/IEC 23008-12:2017 HEIF and AVIF file format decoder and encoder.","url":"https://junglewise.ai/threats/technologies/libheif"},"most_severe":[{"cvss":8.9,"slug":"sharp-heap-based-buffer-overflow-via-libheif-image-parsing-6451a83e","title":"sharp heap-based buffer overflow via libheif image parsing","severity":"high","exploited":false,"published_at":"2026-09-08T21:25:11+00:00","url":"https://junglewise.ai/threats/sharp-heap-based-buffer-overflow-via-libheif-image-parsing-6451a83e"},{"cve":"CVE-2026-32740","cvss":8.8,"slug":"cve-2026-32740-strukturag-libheif-heap-buffer-overflow-in-grid-tile-compositing","title":"Strukturag libheif heap buffer overflow in grid tile compositing","severity":"high","exploited":false,"published_at":"2026-05-19T20:16:18.917+00:00","url":"https://junglewise.ai/threats/cve-2026-32740-strukturag-libheif-heap-buffer-overflow-in-grid-tile-compositing"},{"cve":"CVE-2026-84384","cvss":7.5,"epss":0.0061,"slug":"cve-2026-84384-libheif-is-a-heif-and-avif-file-format-decoder-and-encoder-from-1","title":"libheif decompression bomb via brotli/zlib metadata","severity":"high","exploited":false,"published_at":"2026-09-18T16:17:11.9+00:00","url":"https://junglewise.ai/threats/cve-2026-84384-libheif-is-a-heif-and-avif-file-format-decoder-and-encoder-from-1"},{"cve":"CVE-2026-47247","cvss":7.5,"slug":"cve-2026-47247-strukturag-libheif-heap-information-disclosure-in-grid-image","title":"Strukturag libheif heap information disclosure in grid image decoding","severity":"high","exploited":false,"published_at":"2026-07-21T22:17:12.643+00:00","url":"https://junglewise.ai/threats/cve-2026-47247-strukturag-libheif-heap-information-disclosure-in-grid-image"},{"cve":"CVE-2026-48029","cvss":7.1,"slug":"cve-2026-48029-strukturag-libheif-heap-oob-read-in-imageitem-grid-decode-grid","title":"Strukturag libheif heap OOB read in ImageItem_Grid::decode_grid_tile","severity":"high","exploited":false,"published_at":"2026-07-22T15:17:18.357+00:00","url":"https://junglewise.ai/threats/cve-2026-48029-strukturag-libheif-heap-oob-read-in-imageitem-grid-decode-grid"},{"cve":"CVE-2026-32882","cvss":7.1,"slug":"cve-2026-32882-libheif-heap-buffer-over-read-in-heifpixelimage-overlay","title":"libheif heap buffer over-read in HeifPixelImage::overlay","severity":"high","exploited":false,"published_at":"2026-05-19T21:16:42.363+00:00","url":"https://junglewise.ai/threats/cve-2026-32882-libheif-heap-buffer-over-read-in-heifpixelimage-overlay"},{"cve":"CVE-2026-32741","cvss":7.1,"slug":"cve-2026-32741-strukturag-libheif-heap-buffer-overflow-in-maskimagecodec","title":"Strukturag libheif heap buffer overflow in MaskImageCodec","severity":"high","exploited":false,"published_at":"2026-05-19T21:16:42.073+00:00","url":"https://junglewise.ai/threats/cve-2026-32741-strukturag-libheif-heap-buffer-overflow-in-maskimagecodec"},{"cve":"CVE-2026-41069","cvss":6.5,"epss":0.0004,"slug":"cve-2026-41069-strukturag-libheif-out-of-bounds-read-in-sampleauxinforeader","title":"Strukturag libheif out-of-bounds read in SampleAuxInfoReader","severity":"medium","exploited":false,"published_at":"2026-05-22T21:16:43.327+00:00","url":"https://junglewise.ai/threats/cve-2026-41069-strukturag-libheif-out-of-bounds-read-in-sampleauxinforeader"},{"cve":"CVE-2026-49271","cvss":6.5,"slug":"cve-2026-49271-libheif-out-of-bounds-read-in-uncompressed-heif-decoder","title":"libheif out-of-bounds read in uncompressed HEIF decoder","severity":"medium","exploited":false,"published_at":"2026-06-19T18:16:19.353+00:00","url":"https://junglewise.ai/threats/cve-2026-49271-libheif-out-of-bounds-read-in-uncompressed-heif-decoder"},{"cve":"CVE-2026-32814","cvss":6.5,"slug":"cve-2026-32814-strukturag-libheif-uninitialized-heap-memory-leak-in-grid-image","title":"Strukturag libheif uninitialized heap memory leak in grid image decoding","severity":"medium","exploited":false,"published_at":"2026-05-19T21:16:42.223+00:00","url":"https://junglewise.ai/threats/cve-2026-32814-strukturag-libheif-uninitialized-heap-memory-leak-in-grid-image"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}