important · Zero-click — Image parsing
A crafted HEIF reference chain can crash automatic libheif consumers before decoding.
Affects
libheif, the HEIF/AVIF library used by Linux desktop image loaders and server-side image-processing pipelines.
About 45,000 distinct dimg references evade the cycle and finished-item checks until the pre-decode recursive walk exhausts the process stack.
Detail and 2 sources
Libheif 1.23.4 replaces the recursive walk with an explicit heap worklist.