Title: libheif de strukturag, Description: libheif es un decodificador y codificador de formato de archivo HEIF y AVIF. Las versiones 1.21.2 y anteriores contienen una lectura excesiva de búfer de montón en HeifPixelImage::overlay() en libheif/pixelimage.cc. Al componer una imagen de superposición (iovl) cuya imagen secundaria tiene una profundidad de bits diferente para el canal alfa que para los canales de color, la función indexa el plano alfa utilizando el paso del canal de color (in_stride) en lugar del alpha_stride recuperado previamente, lo que provoca lecturas más allá del final del búfer alfa (hasta 3.123 bytes para una imagen de 100×50 con color de 10 bits y alfa de 8 bits). Un archivo HEIF manipulado puede explotar esto para causar una denegación de servicio (bloqueo) o potencialmente divulgar memoria de montón adyacente a través de bytes filtrados incrustados en los píxeles de salida decodificados. Este problema ha sido solucionado en la versión 1.22.0.

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:10"]}]

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glycin-loaders","cpes":["cpe:/o:redhat:enterprise_linux:10"]}]

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CWE-125

https://access.redhat.com/security/cve/CVE-2026-32882

https://bugzilla.redhat.com/show_bug.cgi?id=2480000

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32882.json

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:10"]}]

{"timestamp":"2026-05-20T17:22:17.177644Z","id":"CVE-2026-32882","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"strukturag","product":"libheif","versions":[{"version":"< 1.22.0","status":"affected"}]}]

https://github.com/strukturag/libheif/security/advisories/GHSA-hg7q-rjr2-8x46

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay() in libheif/pixelimage.cc. When compositing an overlay image (iovl) whose child image has a different bit depth for the alpha channel than for the color channels, the function indexes into the alpha plane using the color channel stride (in_stride) instead of the previously retrieved alpha_stride, causing reads past the end of the alpha buffer (up to 3,123 bytes for a 100×50 image with 10-bit color and 8-bit alpha). A crafted HEIF file can exploit this to cause a denial of service (crash) or potentially disclose adjacent heap memory through leaked bytes embedded in the decoded output pixels. This issue has been fixed in versionThis issue has been fixed in version 1.22.0.

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CWE-125

https://github.com/strukturag/libheif/releases/tag/v1.22.0

https://github.com/strukturag/libheif/security/advisories/GHSA-hg7q-rjr2-8x46