A memory exhaustion vulnerability exists in heifer-isobmff when parsing crafted HEIF/HEIC files with a maliciously large number of item and extent counts in the iloc box. This can cause excessive memory allocation leading to process aborts. The issue affects all versions prior to 0.3.27 and was fixed by bounding counts and rejecting invalid extents.