See how struktur ag compares to other vendors in security performance
libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITHUNCOMPRESSEDCODEC is enabled, heifcontextaddimagetile() accepts an independently constructed tile whose component-plane dimensions do not match the tile geometry established by the prototype image. ImageItemuncompressed::addimagetile() passes that tile directly to uncencoder::encodetile(), which lacked the checkcomponentsizes() gate and sizes its output from the configured tile geometry while copying the tile's actual component-plane dimensions. An oversized component plane can therefore make uncencodercomponentinterleave::encodetile() copy attacker-controlled data beyond the heap output buffer. This issue is fixed in version 1.23.2.