CVE-2026-84449

libheif (HEIF/AVIF encoder/decoder) is affected by an integer overflow in Op_RGB24_32_to_YCbCr::convert_colorspace() (prior to v1.19.6). When extremely large RGB images are created via heif_image_create() and heif_image_add_plane(), the image-plane stride stored in an integer width can overflow. ...