Multiple security issues were discovered in libheif, a library for reading and writing HEIF and AVIF images. Processing specially crafted images could result in denial of service through excessive resource consumption or crashes, or disclosure of process memory. A use-after-free and double-free affecting timestamp handling during image encoding, including transcoding of crafted images, is also addressed. https://security-tracker.debian.org/tracker/DSA-6583-1