Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-48029
PUBLISHED
More InfoOfficial Page
Assigner-GitHub_M
Assigner Org ID-a0819718-46f1-4df5-94e2-005712e83aaa
View Known Exploited Vulnerability (KEV) details
Published At-22 Jul, 2026 | 14:13
Updated At-22 Jul, 2026 | 15:20
Rejected At-
▼CVE Numbering Authority (CNA)
libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue.

Affected Products
Vendor
strukturag
Product
libheif
Versions
Affected
  • >= 1.19.0, < 1.22.0
Problem Types
TypeCWE IDDescription
CWECWE-125CWE-125: Out-of-bounds Read
CWECWE-191CWE-191: Integer Underflow (Wrap or Wraparound)
Type: CWE
CWE ID: CWE-125
Description: CWE-125: Out-of-bounds Read
Type: CWE
CWE ID: CWE-191
Description: CWE-191: Integer Underflow (Wrap or Wraparound)
Metrics
VersionBase scoreBase severityVector
3.17.1HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Version: 3.1
Base score: 7.1
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/strukturag/libheif/security/advisories/GHSA-6x5f-qchq-cxqv
x_refsource_CONFIRM
https://github.com/strukturag/libheif/commit/e523ec0bf379110b7c33d4c159f8b1202d332157
x_refsource_MISC
Hyperlink: https://github.com/strukturag/libheif/security/advisories/GHSA-6x5f-qchq-cxqv
Resource:
x_refsource_CONFIRM
Hyperlink: https://github.com/strukturag/libheif/commit/e523ec0bf379110b7c33d4c159f8b1202d332157
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/strukturag/libheif/security/advisories/GHSA-6x5f-qchq-cxqv
exploit
Hyperlink: https://github.com/strukturag/libheif/security/advisories/GHSA-6x5f-qchq-cxqv
Resource:
exploit
Details not found