Threats affecting pkg:github/libheif

A heap-based buffer overflow vulnerability exists in libheif versions 1.18.0 through before 1.23.3 in the function unc_decoder_mixed_interleave::processTile(). This flaw allows attackers to craft malicious HEIF files with chroma components of unequal bit depths, leading to out-of-bounds heap writes. Exploitation could potentially result in code execution within image-processing pipelines. The issue is fixed in libheif version 1.23.3.