CVE-2026-62377

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.1

Description A crafted HEIF sequence processed by the heif context read from memory() function can result in a context with no registered sequence tracks. This leads to a crash when the heif context get track(ctx, 0) function is called. In builds where assertions are enabled, the HeifContext::get track() function triggers an assert(has sequence()) call, causing the application to abort. In release builds, the process attempts to dereference m tracks.begin()->second on an empty map, resulting in undefined behavior and typically a system crash. This issue is accessible via public APIs after the software parses attacker-controlled bytes.

Recommendations Update to version 1.23.1.