HEIF Heist: one C image parser bug chain hits OpenAI, Slack, Meta and GitHub Enterprise
ccerrato147 · x · 2026-09-19
Security research team Hacktron published "HEIF Heist", a class of remote attack paths targeting services that decode attacker-controlled HEIF/HEIC/AVIF images. The vulnerable surface lives in native C/C++ decoders libheif and libde265 (versions 1.19–1.23 all affected), which sneak into production via ImageMagick, libvips, Sharp, distro packages, and container base images — bundled in and unaudited for years.
Confirmed impact
- OpenAI: dump of private repositories; researchers got $6,500 and were told Discourse testing was "out of scope"
- Slack: RCE leaking files
- Meta's core product suite: RCE via image upload
- GitHub Enterprise: authenticated RCE, CVE-2026-19118
- Discourse: authenticated RCE
- Next.js: unauthenticated RCE via AVIF image optimization, with tokens, AWS keys, and user files right behind it
- Multiple additional web frameworks/CMS and apps affected
Attackers can fingerprint the remote libheif version by probing upload endpoints with crafted .avif/.heic files, then fire a version-matched n-day or 0-day payload for memory corruption, data exfiltration, or RCE. The author's thesis: half of tech sits on one C image parser nobody chose and nobody audits — one uploaded picture is enough.
Related event: HEIF Heist: Image Parser Flaw Exposes OpenAI, Meta, GitHub and More(5 posts)→
More from Infra
- Why Jev-class models could become a near-free judgment primitive running on-device — signulll · 2026-09-19
- Pedro Domingos: Opposing Data Centers Means Keeping Your Country Stupid — pmddomingos · 2026-09-19
- Pedro Domingos: OpenAI and Anthropic's real moat is their massive secured compute — pmddomingos · 2026-09-19
- Fully Local, Private Computer-Use AI Arrives — Runs on a 3060 Ti 12GB — WolframRvnwlf · 2026-09-19
- AWS ships 13 SageMaker inference updates in 2026, cutting cold-start latency up to 65% — AWS ML Blog · 2026-09-19
- Dev Runs World Model LingBot-World 2.0 at 16 FPS on One RTX 5090, 2.5x Faster Than SGLang — Kaarel_Kaarelson · 2026-09-19