Vendor
A heap-based buffer overflow vulnerability in libheif versions 1.18.0 through 1.23.2 allows out-of-bounds heap writes via crafted HEIF files with mismatched chroma bit depths, potentially facilitating arbitrary code execution.