Skip to content

CVE lookup

CVE-2026-32738

Pruva has a verified reproduction for CVE-2026-32738: libheif: integer underflow out-of-bounds read crash via crafted HEIF stsc box. The canonical evidence record is REPRO-2026-00142.

REPRO

REPRO-2026-00142

Package

libheif · c

Severity

MEDIUM

Status

published