NULL pointer dereference in Strukturag Libheif
CVE-2026-47709
libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API `heif_image_handle_get_image_tiling()` when a malformed uncompressed HEIF image item has an associated `uncC` property but no…
Affected products
- Strukturag Libheif — versions < 1.22.0
Weakness classification (CWE)
References
- https://github.com/strukturag/libheif/security/advisories/GHSA-4h72-vqgp-9376 (x_refsource_CONFIRM)
- https://github.com/strukturag/libheif/issues/1802 (x_refsource_MISC)
- https://github.com/strukturag/libheif/pull/1806 (x_refsource_MISC)