CVE-2026-120208 | strukturag libheif up to 1.23.2 HEIF Decoder processTile buffer overflow (EUVD-2026-114729)

October 31, 2026 Yanac

A vulnerability described as critical has been identified in strukturag libheif up to 1.23.2. This affects the function unc_decoder_mixed_interleave::processTile of the component HEIF Decoder. Executing a manipulation can lead to buffer overflow.

The identification of this vulnerability is CVE-2026-120208. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More