CVE-2026-28231
CVE-2026-28231 · pillow_heif Has Integer Overflow in Encode Path Buffer Validation that Leads to Heap Out-of-Bounds Read
This page contains facts from public vulnerability sources. Check the original advisory before updating.
pillow_heif is a Python library for working with HEIF images and plugin for Pillow. Prior to version 1.3.0, an integer overflow in the encode path buffer validation of `_pillow_heif.c` allows an attacker to bypass bounds checks by providing large image dimensions, resulting in a heap out-of-bounds read. This can lead to information disclosure (server heap memory leaking into encoded images) or denial of service (process crash). No special configuration is required — this triggers under default settings. Version 1.3.0 fixes the issue.
CVSS 5.5 · Medium · EPSS 0.7% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
pillow_heif
- Versions
- < 1.3.0: Affected
No fix published
pi-heif PyPI
- Versions
- 0.10.0
- 0.10.1
- 0.11.0
- 0.11.1
- 0.12.0
- 0.13.0
- 0.13.1
- 0.14.0
- 0.15.0
- 0.16.0
- 0.17.0
- 0.18.0
- 0.20.0
- 0.21.0
- 0.22.0
- 0.7.0
- 0.7.1
- 0.7.2
- 0.8.0
- 0.9.0
- 0.9.1
- 0.9.2
- 0.9.3
- 1.0.0
- 1.1.0
- 1.1.1
- 1.2.0
- 1.2.1
- Affected ranges
- ECOSYSTEM: < 1.3.0
Update to 1.3.0
pillow-heif PyPI
- Versions
- 0.1.10
- 0.1.11
- 0.1.4
- 0.1.5
- 0.10.0
- 0.10.1
- 0.11.1
- 0.12.0
- 0.13.0
- 0.13.1
- 0.14.0
- 0.15.0
- 0.16.0
- 0.17.0
- 0.18.0
- 0.2.2
- 0.2.3
- 0.2.4
- 0.2.5
- 0.20.0
- 0.21.0
- 0.22.0
- 0.3.0
- 0.3.1
- 0.3.2
- 0.4.0
- 0.5.0
- 0.5.1
- 0.6.0
- 0.6.1
- 0.7.0
- 0.7.1
- 0.7.2
- 0.8.0
- 0.9.0
- 0.9.1
- 0.9.2
- 0.9.3
- 1.0.0
- 1.1.0
- 1.1.1
- 1.2.0
- 1.2.1
- Affected ranges
- ECOSYSTEM: < 1.3.0
Update to 1.3.0