CVE-2026-47709 strukturag CVE debrief

Who should care

Users of libheif library, particularly those using versions prior to 1.22.0, should be aware of this vulnerability and take steps to update or mitigate. This includes reviewing and validating input HEIF and AVIF files, implementing compensating controls for affected applications, and tracking exceptions and retesting remediated assets.

Technical summary

The vulnerability exists in the `heif_image_handle_get_image_tiling()` function of libheif, where a malformed uncompressed HEIF image item with an `uncC` property but no `ispe` property causes a crash. In debug builds, this triggers an assertion failure, while in release builds, it leads to a null pointer read at address `0xa8`. The vulnerability has been fixed in version 1.22.0 of libheif. Users of libheif library, particularly those using versions prior to 1.22.0, should be aware of this vulnerability and take steps to update or mitigate.

Defensive priority

Medium priority due to the potential for denial of service or possible code execution with crafted input.

Recommended defensive actions

• Update libheif to version 1.22.0 or later
• Review and validate input HEIF and AVIF files
• Implement compensating controls for affected applications
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record was published on 2026-07-21T22:17:13.097Z and was last modified on 2026-07-22T20:38:42.127Z. The NVD entry is currently awaiting analysis. There is limited information available about the vulnerability, and defenders should verify the affected scope and severity with the vendor. The vulnerability exists in the public C API `heif_image_handle_get_image_tiling()` of libheif, where a malformed uncompressed HEIF image item with an `uncC` property but no `ispe` property causes a crash. In debug builds, this triggers an assertion failure, while in release builds, it leads to a null pointer read. Users should review the official advisory and CVE record for more information.

Official resources