Commit bb10a2cf for libheif
commit bb10a2cf3fc55b3a8dd9ffa7300b8c34d2a574e6
Author: Dirk Farin <dirk.farin@gmail.com>
Date: Fri Mar 13 23:53:03 2026 +0100
check for stsc boxes with zero entries
diff --git a/libheif/sequences/seq_boxes.cc b/libheif/sequences/seq_boxes.cc
index 34774f52..7c6c0b2d 100644
--- a/libheif/sequences/seq_boxes.cc
+++ b/libheif/sequences/seq_boxes.cc
@@ -855,6 +855,12 @@ Error Box_stsc::parse(BitstreamRange& range, const heif_security_limits* limits)
}
uint32_t entry_count = range.read32();
+ if (entry_count == 0) {
+ return {
+ heif_error_Invalid_input,
+ heif_suberror_Unspecified,
+ "'stsc' box with zero entries."};
+ }
// Note: test against maximum number of frames (upper limit) since we have no limit on maximum number of chunks
if (limits->max_sequence_frames > 0 && entry_count > limits->max_sequence_frames) {