PT-2026-60429 · Libheif · Libheif

CVE-2026-62291 · Published 2026-07-16 · Updated 2026-08-01

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions libheif (affected versions not specified)

Description A heap buffer overflow occurs in the uncompressed encoder when processing a HEIF image where the alpha plane is larger than the picture. This happens because the encoder writes past the allocated heap buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-62291

OPENSUSE-SU-2026:11416-1

Affected Products

Libheif

References · 6

• https://osv.dev/vulnerability/openSUSE-SU-2026:11416-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-62291 · Note
• https://suse.com/security/cve/CVE-2026-62289 · Note
• https://suse.com/security/cve/CVE-2026-62292 · Note
• https://twitter.com/patchhawk_/status/2077568606813262139 · Twitter Post
• https://suse.com/security/cve/CVE-2026-62377 · Note