USN-8774-1: libheif vulnerabilities
Ubuntu patches libheif image-parsing flaws allowing denial of service or arbitrary code execution (CVE-2026-62291, CVE-2026-62377).
Ubuntu Security Notice USN-8774-1 addresses two vulnerabilities in libheif, the HEIF image library. CVE-2026-62291, discovered by Ali Firas, involves incorrect handling of certain images that could allow an attacker to cause a denial of service or execute arbitrary code. CVE-2026-62377, discovered by Dmitrijs Trizna, involves incorrect handling of image sequences leading to possible denial of service.
28