An integer overflow vulnerability exists in libavif versions before 1.3.0 in the avifImageRGBToYUV function within reformat.c. The issue arises from multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes, which can overflow integer limits.