Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the libheif/region.cc process. An attacker can trigger out-of-bounds memory access by crafting a HEIF file with large width and height values that cause an integer overflow during buffer allocation...