CVE-2026-47714 | strukturag libheif up to 1.21.2 Inline Mask Parsing libheif/region.cc width/height integer overflow

A vulnerability identified as critical has been detected in strukturag libheif up to 1.21.2. Impacted is an unknown function of the file libheif/region.cc of the component Inline Mask Parsing. The manipulation of the argument width/height leads to integer overflow.

This vulnerability is traded as CVE-2026-47714. It is possible to initiate the attack remotely. There is no exploit available.