libheif Image Library Flaws Expose Systems to DoS and Code Execution
Critical vulnerabilities in libheif allow attackers to crash systems or run malicious code through malformed images. Developers should update immediately to mitigate risks.
TL;DR
- Two high-severity flaws found in libheif image handling library
- CVE-2026-62291 allows remote code execution via crafted images
- CVE-2026-62377 enables denial of service through malicious sequences
- Affects applications using libheif for HEIF/HEIC image processing
- Immediate patching recommended for all Ubuntu users
Security researchers have uncovered serious vulnerabilities in libheif, a widely-used library for handling HEIF and HEIC image formats. These flaws could allow attackers to execute arbitrary code or crash applications simply by processing malicious image files.
The vulnerabilities affect how libheif parses certain image data, making any software that relies on this library potentially susceptible to exploitation. This includes web applications, image processing services, and any system component that handles user-uploaded HEIF/HEIC files.
Vulnerability Details
- CVE-2026-62291: Memory corruption flaw allows arbitrary code execution when processing crafted images
- CVE-2026-62377: Buffer overflow in image sequence handling leads to denial of service conditions
- Both vulnerabilities can be triggered remotely without authentication
- Attack surface includes any application using libheif for image decoding
- Proof of concept exploits demonstrate reliable crash reproduction
Impact and Mitigation
- Systems running Ubuntu with libheif installed are potentially vulnerable
- Web applications accepting HEIF/HEIC uploads face immediate risk exposure
- Update to patched versions released in USN-8774-1 immediately
- Consider temporary file type restrictions while applying updates
- Audit logs for unusual image processing failures as potential exploitation attempts
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.