libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list data can make Track::initsampletimingtable() compute a logical mnumoutputsamples value that exceeds the uint32t counters used by TrackVisual::decodenextimagesample() and Track::getnextsamplerawdata(). The resulting comparison can never reach the oversized output count, causing non-terminating decode or raw-sample loops and bypassing maxsequenceframes. The same sequence path repeatedly calls Boxstts::getsampleduration() and allocates Chunk::msampleranges and Track::mpresentationtimeline outside MemoryHandle accounting, allowing severe CPU and memory exhaustion from a small file. This issue is fixed in version 1.23.2.