PT-2026-24787 · Struktur Ag · Libheif

Biniam · Publicado 2026-02-23 · Atualizado 2026-03-29 · CVE-2026-3949

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions strukturag libheif versions up to 1.21.2

Description A flaw exists in strukturag libheif that allows for an out-of-bounds read. The issue resides in the vvdec push data2 function within the libheif/plugins/decoder vvdec.cc file of the HEIF File Parser component. Manipulating the size argument can trigger the flaw. The attack requires local access. The exploit has been publicly disclosed.

Recommendations Implement patch b97c8b5f198b27f375127cd597a35f2113544d03 to correct this issue.

Exploit

Correção

Buffer Overflow

Out of bounds Read

Enumeração de Fraquezas

CWE-119

CWE-125

Identificadores relacionados

BDU:2026-05075

CVE-2026-3949

ECHO-335C-65C6-BCA4

OPENSUSE-SU-2026:10460-1

SUSE-SU-2026:1660-1

Produtos afetados

Libheif

Referências · 19

• 🔥 https://github.com/biniamf/pocs/tree/main/libheif_vvdec · Exploit
• https://github.com/strukturag/libheif/commit/b97c8b5f198b27f375127cd597a35f2113544d03 · Correção
• https://github.com/strukturag/libheif/issues/1712#issuecomment-3947938531 · Nota
• https://github.com/strukturag/libheif/issues/1712 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2026:10460-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-3949 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-3949 · Aviso do Fabricante
• https://github.com/strukturag/libheif · Nota
• https://cve.org/CVERecord?id=CVE-2026-3949 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-05075 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-3949 · Aviso do Fabricante
• https://vuldb.com/?ctiid.350381 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3949 · Nota de Segurança
• https://vuldb.com/?submit.765979 · Nota
• https://vuldb.com/?id.350381 · Nota