Title: libheif de strukturag, Description: libheif es un decodificador y codificador de formato de archivo HEIF y AVIF. Las versiones 1.21.2 y anteriores contienen una vulnerabilidad de desbordamiento de búfer de montón (escritura) en la composición de mosaicos de cuadrícula, permitiendo a un atacante escribir 64 bytes de datos totalmente controlados por el atacante más allá del final de una asignación de montón del plano de croma al crear un archivo HEIF/AVIF con una cuadrícula de 1×4 de mosaicos de altura impar. El desbordamiento se activa durante la decodificación normal de la imagen con la configuración de compilación predeterminada. Los bytes escritos son valores de píxeles de croma (Cb/Cr) del mosaico atacante, dando al atacante control total sobre el contenido del desbordamiento. Este problema ha sido solucionado en la versión 1.22.0.

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:10"]}]

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glycin-loaders","cpes":["cpe:/o:redhat:enterprise_linux:10"]}]

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787

https://access.redhat.com/security/cve/CVE-2026-32740

https://bugzilla.redhat.com/show_bug.cgi?id=2479969

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32740.json

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:10"]}]

{"timestamp":"2026-05-21T03:55:32.284407Z","id":"CVE-2026-32740","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"strukturag","product":"libheif","versions":[{"version":"< 1.22.0","status":"affected"}]}]

https://github.com/strukturag/libheif/security/advisories/GHSA-frfr-f3vg-2g6j

https://github.com/strukturag/libheif/security/advisories/GHSA-frfr-f3vg-2g6j Types: Exploit, Vendor Advisory

OR
          *cpe:2.3:a:struktur:libheif:*:*:*:*:*:*:*:* versions up to (excluding) 1.22.0

CISA-ADP: https://github.com/strukturag/libheif/security/advisories/GHSA-frfr-f3vg-2g6j Types: Exploit, Vendor Advisory

GitHub, Inc.: https://github.com/strukturag/libheif/releases/tag/v1.22.0 Types: Release Notes

GitHub, Inc.: https://github.com/strukturag/libheif/security/advisories/GHSA-frfr-f3vg-2g6j Types: Exploit, Vendor Advisory

https://github.com/strukturag/libheif/security/advisories/GHSA-frfr-f3vg-2g6j

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write 64 bytes of fully attacker-controlled data past the end of a chroma plane heap allocation by crafting a HEIF/AVIF file with a 1×4 grid of odd-height tiles. The overflow is triggered during normal image decoding with default build configuration. The written bytes are chroma (Cb/Cr) pixel values from the attacking tile, giving the attacker full control over the overflow content. This issue has been fixed in version 1.22.0.

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787

https://github.com/strukturag/libheif/releases/tag/v1.22.0

https://github.com/strukturag/libheif/security/advisories/GHSA-frfr-f3vg-2g6j