CVE Feed

    Dashboard / CVE / CVE-2026-84449

    CVE-2026-84449

    libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace() stores image-plane strides in an integer width that can overflow for extremely large RGB images created through heif_image_create() and heif_image_add_plane(). The resulting wrapped stride causes the conversion loop in libheif/color-conversion/rgb2yuv.cc to compute an invalid input pointer and read beyond the allocated interleaved plane while heif_context_encode_image() performs RGB-to-YCbCr conversion. This can crash the encoding process. This issue is fixed in version 1.19.6.

    Published:Sep 18, 2026
    Last Modified:Sep 22, 2026
    EPS:Sep 18, 2026
    EPSS Score:0.00339
    CVSS Score:3.7

    Affected Products

    Vendor
    Struktur
    Product
    Libheif

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers
    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-84450 (CVSS 4.3) — libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item con…
    CVE-2026-84451 (CVSS 6.5) — libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item br…
    CVE-2026-84447 (CVSS 7.5) — libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and ide…
    CVE-2026-84384 (CVSS 7.5) — libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mim…
    CVE-2026-84444 (CVSS 7.4) — libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is e…
    CVE-2026-84383 (CVSS 9.8) — libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or…
    CVE-2026-84446 (CVSS 7.5) — libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and …
    CVE-2026-84448 (CVSS 4) — libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_r…
    CVE-2026-62377 (CVSS 4.3) — libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence acc…
    CVE-2026-62291 (CVSS 5.3) — libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence wi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High