HEIF Heist is Hacktron's name for a class of remote attack paths targeting services that decode attacker-controlled HEIF, HEIC, or AVIF images. By exploiting underlying native libraries, these vulnerabilities allow an attacker to bypass application-level defenses and trigger memory corruption, data exposure, or remote code execution (RCE).

The vulnerable attack surface lives below the application layer inside native C/C++ decoders such as libheif and libde265. These parsers typically enter production environments indirectly bundled via higher-level wrappers like Image Magick, libvips, or Sharp, standard distro packages, and prebuilt container base images. By probing upload endpoints with crafted .avif or .heic files, an attacker can fingerprint the remote libheif version family and fire an exact version-matched payload.

The research uncovered impact across Open AI private repositories, Slack, Meta's core product suite, Discourse, Next.js, and GitHub Enterprise (CVE-2026-19118). HEIF Heist targets multiple release families including 1.19.x, 1.20.x, 1.22.x, and 1.23.x. Upgrading to libheif v1.23.2 or later and the latest libde265 is recommended. Production architectures should disable untrusted HEIF/AVIF decoding where unnecessary or isolate image-processing pipelines inside hardened sandboxes.