HEIF Heist is a class of remote attack exploiting vulnerabilities in native C/C++ image decoders like libheif and libde265 to achieve memory corruption, data exfiltration, or remote code execution. The vulnerability affects applications processing untrusted HEIF, HEIC, or AVIF images across web frameworks, cloud services, and communication platforms. Mitigation requires updating to patched versions and implementing defense-in-depth strategies like sandboxing image processing.
HEIF Heist is a class of remote vulnerabilities in HEIF, HEIC, and AVIF image decoders (libheif, libde265) that affect services including OpenAI, Slack, Meta, and GitHub. By uploading crafted images, attackers can trigger memory corruption, data exposure, or remote code execution below the application layer. The Hacktron research team discovered the vulnerability affects numerous platforms and recommends updating to patched versions and implementing defense-in-depth strategies.