Zero-click — libheifA crafted HEIF conversion can encode adjacent libheif heap bytes into returned RGB pixels.No cited source identifies a network-facing consumer that both performs the conversion automatically and exposes its output to the attacker.SourcesCode / PoCheap OOB read / info disclosure (Op_YCbCr420_to_RRGGBBaa) · Advisory · strukturag/libheif · GitHubSecondaryRelease v1.23.3 - security release · strukturag/libheifCopy linkShare this findingEmailHacker NewsRedditMastodonBlueskyXLinkedInFacebookCopy link