A heap-based buffer overflow vulnerability exists in libheif versions 1.18.0 up to but not including 1.23.3 in the function unc_decoder_mixed_interleave::processTile(). This flaw allows attackers to write out of bounds by crafting HEIF files with chroma components of unequal bit depths, potentially leading to code execution during image processing.