A heap buffer overflow in libheif's image scaling code (all versions through v1.23.1) allows remote code execution when processing crafted AVIF files. The flaw is triggered by nested identity-derivation and auxiliary item references.
A heap buffer overflow in libheif's image scaling code (all versions through v1.23.1) allows remote code execution when processing crafted AVIF files. The flaw is triggered by nested identity-derivation and auxiliary item references.