HEIF Heist is a class of remote attack exploiting vulnerabilities in native C/C++ image decoders like libheif and libde265 to achieve memory corruption, data exfiltration, or remote code execution. The vulnerability affects applications processing untrusted HEIF, HEIC, or AVIF images across web frameworks, cloud services, and communication platforms. Mitigation requires updating to patched versions and implementing defense-in-depth strategies like sandboxing image processing.
Researchers from Hacktron AI used Anthropic's security tools to breach an OpenAI employee's ChatGPT account, gaining access to private software information as part of a paid bug bounty program. The incident underscores growing security vulnerabilities at leading AI companies amid concerns about powerful models being exploited by malicious actors and foreign adversaries.
Hacktron disclosed a chain of two critical vulnerabilities discovered on July 25, 2026 that could compromise OpenAI employees' ChatGPT accounts: a heap buffer overflow in libheif and an SSO misconfiguration on community.openai.com. The researchers demonstrated access by opening a pull request in OpenAI's internal repository and received a $6,500 bounty after coordinated disclosure.
HEIF Heist is a class of remote vulnerabilities in HEIF, HEIC, and AVIF image decoders (libheif, libde265) that affect services including OpenAI, Slack, Meta, and GitHub. By uploading crafted images, attackers can trigger memory corruption, data exposure, or remote code execution below the application layer. The Hacktron research team discovered the vulnerability affects numerous platforms and recommends updating to patched versions and implementing defense-in-depth strategies.