HEIF Heist: image parser RCE exploit
Summary
HEIF Heist describes a class of remote attack paths targeting image decoders (HEIF/HEIC/AVIF) via native libraries like libheif and libde265, enabling memory corruption, data exposure, or remote code execution. The post catalogs multiple real-world vulnerable components and provides remediation guidance, highlighting the broad impact across services and frameworks.