# Vercel — Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers

- Company: Vercel (vercel.com)
- Announced: 2026-09-18
- Category: safety-policy-update
- Coverage: not counted
- Announcement: yes
- Group: announcements
- Source: https://vercel.com/blog/reproducing-disclosing-and-fixing-the-libheif-vulnerability-with-hacktron-and-the-maintainers
- Record: https://forck.live/items/20655-reproducing-disclosing-and-fixing-the-libheif-vulnerability-with-hacktron-and
- Subject: v0 / AI SDK / AI Gateway

Vercel describes how Hacktron discovered a remote code execution vulnerability in libheif, an AVIF decoder used by Next.js and other software. Vercel applied a platform-wide mitigation, coordinated with maintainers of sharp, libvips, and libheif, and released a Next.js security update that disabled AVIF optimization. The libheif maintainer released version 1.23.2 to fix the RCE.

## Evidence

Verbatim from https://vercel.com/blog/reproducing-disclosing-and-fixing-the-libheif-vulnerability-with-hacktron-and-the-maintainers:

> In August 2026, Hacktron reported what looked like a remote code execution (RCE) vulnerability in Next.js image optimization. Their investigation found that the vulnerable code was not in Next.js itself, but upstream in libheif , an AVIF image decoder used by Next.js, ImageMagick , WordPress , sharp , and much of the web.

---

Record: https://forck.live/items/20655-reproducing-disclosing-and-fixing-the-libheif-vulnerability-with-hacktron-and
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md