Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the grid image processing and uninitialized pixel plane allocation. An attacker can access sensitive heap memory contents by uploading a specially crafted AVIF or HEIC file to a server-side image processor,...