libde265

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions8
First seenSep 18, 2026
Last mentionedOct 8, 2026

Timeline

8 articles · newest first

USN-8909-1: libde265 vulnerability

Ubuntu warns libde265 can crash on crafted H.265 bitstreams via a NULL pointer dereference.

Ubuntu Security NoticesOct 8, 17:11 UTC · Oct 8, 2026Advisory2 · 2 reads

Re: Vulnerabilities in libheif and libde265

libheif 1.23.5 ships security fixes as the underfunded libheif and libde265 project cites 61 advisories.

oss-securitySep 22, 15:17 UTC · Sep 22, 2026Vulnerability1 · 1 read

Claude Opus 5 Helps Researchers Weaponize HEIF Image Flaw Into Remote Code Execution

Researchers used Claude Opus 5 to help weaponize a HEIF image processing flaw into a remote code execution exploit.

Cyber Security NewsSep 21, 11:34 UTC · Sep 21, 2026Exploit / PoC4 · 2 reads

HEIF Heist Image Flaws Let Attackers Gain RCE Across Meta, Slack and GitHub Enterprise

Hacktron's "HEIF Heist" research shows memory-unsafe HEIF/AVIF parsers enable RCE and data leaks in Slack, Meta, GitHub Enterprise, and OpenAI.

GBHackersSep 21, 08:17 UTC · Sep 21, 2026ResearchExploitedCVE-2026-191184 · 2 reads

HEIF Heist

Hacktron's HEIF Heist research reveals RCE and heap-leak vulnerabilities in libheif/libde265 HEIF/AVIF decoders, affecting Meta, OpenAI, GitHub Enterprise, Discourse, and Next.js.

Lobsters · securitySep 20, 05:56 UTC · Sep 20, 2026ResearchCVE-2026-191184 · 2 reads

Re: Vulnerabilities in libheif and libde265

Hanno Böck flags a security-relevant libheif fix (GHSA-v8qw-hwjv-44hw) rejecting oversized in-band coded image sizes, absent from release 1.23.4.

oss-securitySep 19, 18:02 UTC · Sep 19, 2026Vulnerability1

Vulnerabilities in libheif and libde265

Multiple new security advisories affect the libheif and libde265 codecs; users should verify versions against the published fixes.

oss-securitySep 18, 23:59 UTC · Sep 18, 2026Vulnerability1 · 1 read

Researchers use AI to find widespread software decoder flaw

Hacktron researchers, aided by Claude and GPT-5.6 Sol, disclosed HEIF Heist, memory-corruption flaws in libheif/libde265 enabling RCE against major platforms.

CyberScoopSep 18, 17:19 UTC · Sep 18, 2026Research 3 sources6 · 2 reads

Related CVEs

by mentions

CVE-2026-19118<1%7.7
Race Condition RCE in GitHub Enterprise Server
published Sep 1, 2026github enterprise server

Appears with

libheifproduct · 7
Hacktronorganization · 4
GPT-5.6 Solai model · 3
Metavendor · 3
OpenAIvendor · 3
GitHubvendor · 3
strukturagvendor · 3
ImageMagickproduct · 3
Discoursevendor · 3
OpenAIvictim · 2
Discourseproduct · 2
Claude Opus 5ai model · 2
ChatGPTproduct · 2
Anthropicvendor · 2
OpenAIorganization · 1
ImageMagickvendor · 1

Entities are extracted by the model from each article. First seen Sep 18, 2026, last mentioned Oct 8, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.