CVE-2026-32814

A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. When processing a specially crafted HEIF or AVIF image containing a corrupted grid tile, the library fails to properly initialize memory. This can lead to an information disclosure, where uninitialized heap memory, potentially containing sensitive data such as authentication tokens or other user information, is exposed as part of the decoded image's pixel values. An attacker could exploit this by providing a malicious file, leading to the leakage of internal system data.