Next.js uses the sharp image processing package, which relies on libheif for AVIF parsing. The critical libheif heap buffer overflow can be triggered through sharp when processing malicious AVIF images.
Next.js uses the sharp image processing package, which relies on libheif for AVIF parsing. The critical libheif heap buffer overflow can be triggered through sharp when processing malicious AVIF images.