As cited
Copy frozen at (site build).
vulnerabilities
Researchers use AI to find widespread software decoder flaw
Researchers used large language models from OpenAI and Anthropic to discover a widespread flaw called HEIF Heist in popular software decoders libheif and libde265 that could allow remote code execution and data theft across major platforms. The vulnerability exploits memory corruption errors triggered by specially crafted image files, potentially compromising systems at OpenAI, Meta, GitHub, Amazon Web Services, and other major services. Patches are available but deployments lacking the latest upstream updates remain at risk.
Why it matters: Organizations running unpatched versions of libheif or libde265 in image processing or decoding services face direct exposure to remote code execution and credential theft; security teams should immediately verify patch status and prioritize updates for any systems parsing HEIF, HEIC, or AVIF image files.
- Source published
- First seen by Cybersecurity Tracker