Commit e965898fde for ffmpeg
commit e965898fde7bac41ac9213c91e11992a413c3112
Author: Sakib Sarkar <sakibsarkar74@gmail.com>
Date: Wed Nov 11 19:09:26 2026 +0100
avformat/mov: reject HEIF grids without coded dimensions
Fixes: infinite loop
Fixes: YgVX1m47At6V
Fixes: heif-grid-tile-without-ispe.heic
Infinite loop Replicated through UnModified FFmpeg with timeout
Found-by: Sakib Sarkar
diff --git a/libavformat/mov.c b/libavformat/mov.c
index 0c2f592e7f..ca33cb2285 100644
--- a/libavformat/mov.c
+++ b/libavformat/mov.c
@@ -11270,6 +11270,8 @@ static int read_image_grid(AVFormatContext *s, const HEIFGroup *grid,
if (coded_width > INT_MAX || coded_height > INT_MAX)
return AVERROR_INVALIDDATA;
+ if (coded_width == 0 || coded_height == 0)
+ return AVERROR_INVALIDDATA;
tile_grid->coded_width = coded_width;
tile_grid->coded_height = coded_height;