Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally.
CWE-416