project

libde265

Open-source HEVC video decoder written in C++, used by image and video toolchains to decode HEIF-family content.

Current clusters

build1 publisher

Hacktron chained a libheif bug on OpenAI's forum into internal GitHub repositories

Hacktron's report puts the vulnerable code in libheif, two dependency steps below an ImageMagick call on OpenAI's Discourse forum, and says the upstream fix never went through the usual security advisory process.

Publishers:dev.to

Reality

Evidence38
Adoption28
Hype gap+15
Incentives55
Confidence42

security1 publisher

One independent developer fixed 37 libheif and libde265 security advisories in 2026

The project's own README puts the 2026 advisory count at 37 and the maintenance roster at one independent developer with almost no recurring funding. Products that decode HEIC or AVIF inherit that pace.

Publishers:github.com

Reality

Evidence58
Adoption: Insufficient
Hype gap+10
Incentives70
Confidence62