Vulnerability in libheif via vvdec_push_data2() allows denial of service or information leak

A flaw in libheif enables out-of-bounds memory read via vvdec_push_data2().

Published 9sem1 sourceNotableupdated 9sem

≈ 17sSpeed

The fact

An attacker could trigger a denial of service or extract sensitive data.

The vulnerability was analyzed on 30/04/2026 by Vigilance.fr.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on June 30, 2026