AIKIDO-2026-62500
strukturag.libheif is vulnerable to Out-of-bounds Read
40
Medium Risk
This Affects:
strukturag.libheifTL;DR
libheif's inline-mask region writer API accepts a caller-supplied mask-data length without checking it against the region width and height. The reader later derives the read length from the region geometry alone and walks the mask buffer accordingly. When the supplied buffer is smaller than the geometry requires, the reader performs a heap out-of-bounds read that can crash the process and fold adjacent heap bytes into the returned mask image. The fix validates the mask-data length against the required buffer size.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you build region items with the inline-mask writer API using an untrusted or incorrectly sized mask-data buffer.
Background info
strukturag.libheif is vulnerable to Out-of-bounds Read in versions 0.0.1 - 1.23.1.
How to fix this
Upgrade the strukturag.libheif library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.