CVEFinder.io

CVE-2026-47247

⚠️ high
🔍 Scan for this CVE
Summary

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side image processor (WordPress, Sharp/libvips, ImageMagick, etc.) can recover heap data - including library function pointers sufficient to defeat ASLR, or any other secret - from the publicly-downloadable transcoded JPEG/PNG/WebP output. Local atta

Description

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side image processor (WordPress, Sharp/libvips, ImageMagick, etc.) can recover heap data - including library function pointers sufficient to defeat ASLR, or any other secret - from the publicly-downloadable transcoded JPEG/PNG/WebP output. Local attack vectors are also possible. Version 1.22.0 fixes the issue.

CVSS Score
7.5
High
EPSS Score
0.5
Exploit Probability
Published Date
2026-07-21
First Seen: 2026-07-22
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 68.0% of all 349,016 vulnerabilities in our database.

#111,749
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 22, 2026
🔍 Exploitation Status
Poc
Proof-of-concept available
⚙️ Automatable
YES
Can be exploited automatically
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-07-27
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE IDs (Weakness Types)
CWE-200 CWE-226 CWE-682 CWE-908

📦 Affected Products 1

Vendor Product Status Affected Versions
struktur libheif Affected
< 1.22.0

🔗 References 1

https://github.com/strukturag/libheif/security/advis...
Exploit Vendor Advisory Mitigation

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-48029 ⚠️ high 7.1 0.3 libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in Image... 2026-07-22
CVE-2026-47714 🔶 medium 6.1 0.1 libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code i... 2026-07-21
CVE-2026-47178 🔶 medium 6.1 0.2 libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file (unco... 2026-07-21
CVE-2026-47251 🔶 medium 6.1 0.2 libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8b5`, PR #1712) intro... 2026-07-21
CVE-2026-47254 🔶 medium 6.1 0.2 libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, `Track::init_sample_timing_table()`... 2026-07-21
CVE-2026-47709 🔶 medium 5.5 0.2 libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API `heif_i... 2026-07-21
These CVEs affect the same products