libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing

libheif: Out-of-bounds read in uncompressed unci tile range slicing

libheif: Heap buffer over-read in SampleAuxInfoReader via crafted HEIF sequence file with mismatched saiz sample count

libheif has Heap Out Of Bounds Write in unci subsystem

libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS

libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS

libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames

libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check)

libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation

libheif uncompressed tiled image encoding allows out-of-bounds write

libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow

libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride

libheif has a heap buffer overflow in decode_mask_image()

libheif has Potential Heap Buffer Over-Read