HEIC is a high-efficiency image format commonly associated with Apple devices. It is a variant of HEIF, a container format that can store image data, metadata, and related structures with HEVC compression. Compared with older formats, HEIC can offer smaller files and good quality, but that extra flexibility also makes parsing more complex.
In cyber security, HEIC matters because servers often decode uploaded images for previewing, thumbnailing, or metadata extraction. If the decoder or parser has a memory-safety bug, bounds-checking flaw, or validation mistake, a crafted file can crash the service, expose data, or in some cases enable code execution. Defenders reduce risk by validating file structure, isolating decoding in a sandbox, re-encoding untrusted uploads, and keeping image libraries patched.