HEIF Heist flaws in image-decoding software can let attackers exploit uploads to corrupt memory and potentially execute code remotely.