HEIF Heist: one C image parser bug chain leads to RCE in OpenAI, Meta, GitHub
ccerrato147 · x · 2026-09-19
Hacktron's "HEIF Heist" research exposes a class of attacks against services decoding attacker-controlled HEIF/HEIC/AVIF images via native C/C++ libraries (libheif, libde265), typically bundled through ImageMagick, libvips, Sharp, and container base images.
Demonstrated impact includes: dumping OpenAI private repos, Slack RCE, RCE in Meta's core suite via image upload, leaking Redacted users' and AWS tokens, authenticated RCE on Discourse and GitHub Enterprise (CVE-2026-19118), and unauthenticated RCE in Next.js via AVIF optimization.
Attackers can fingerprint the remote libheif version with crafted files, then fire version-matched n-day or 0-day payloads for memory corruption, data exfiltration, or RCE. Half of tech, the authors argue, rests on an unaudited parser nobody chose — one uploaded picture was enough to bring it down.
Related event: HEIF Heist: Image Parser Bugs Expose OpenAI, Meta, GitHub to RCE(8 posts)→
More from Infra
- Nvidia struggles to hire RL talent from Anthropic, highlighting chipmakers' reinforcement learning gap — teortaxesTex · 2026-11-04
- Sam Altman? No—Bezos Calls for Nuclear-Powered Offshore Data Center Platforms — beffjezos · 2026-11-04
- SpecPilot agent boosts speculative decoding from 4.46× to 10.87×, no retraining — pmttyji · 2026-11-04
- NEURA launches Neuron AI, but Europe's Physical AI test is whether the stack matures together — ingliguori · 2026-11-04
- S3-based databases cache in memory and NVMe, making disk vs S3 latency gap smaller than expected — mgill25 · 2026-11-04
- gpu-unlock project claims up to 2x FP16 tensor throughput for RTX 20/30/40 cards — paranoidray · 2026-11-04