CVE-2026-62291: Libheif Unc Encoder Missing Plane Size Check

Uncompressed image encoder processes planar components without validating component plane dimensions against primary image dimensions, which can lead to heap buffer overflow.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C++
greprules fetch cve-2026-62291-libheif-unc-encoder-missing-plane-size-check --engine opengrep

Description

Uncompressed image encoder processes planar components without validating component plane dimensions against primary image dimensions, which can lead to heap buffer overflow.