logo

Researchers use AI to find widespread software decoder flaw 

ID: 215142b4-0e8a-5023-95fc-63e43d64c1bc

STIX ID: report--215142b4-0e8a-5023-95fc-63e43d64c1bc

Feed Name: CyberScoop

Threat Score
75/100

Date Published: 2026-09-18

Date Updated: 2026-09-19

Author: djohnson

...
...

Researchers disclosed “HEIF Heist,” a memory-corruption vulnerability in common HEIF/HEIC/AVIF decoders (libheif/libde265) that can leak in-memory data and lead to remote code execution; the team used AI models to accelerate exploit development and demonstrated a proof-of-concept compromise of OpenAI employee accounts and access to internal repositories, while noting patches exist but unpatched deployments remain at risk.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.