Large HEIC files can not be processed

[mxsrm]

I have searched the existing issues, both open and closed, to make sure this is not a duplicate report.

• Yes

The bug

When using the 200MP option on my Galaxy S25 Ultra and saving the images as HEIC, the uploaded files do not get thumbnails generated and are not displayed in the Web-App ("Error loading image").

The OS that Immich Server is running on

Debian 12

Version of Immich Server

v1.135.3

Version of Immich Mobile App

v1.135.1

Platform with the issue

• Server
• Web
• Mobile

Your docker-compose.yml content

Default

Your .env content

Default with just passwords changed

Reproduction steps

1. Take 200 MP picture as HEIC
2. Let Immich upload it from Android app
3. Try to view it in the web-app

Relevant log output

immich_server            | [Nest] 7  - 07/19/2025, 11:05:04 PM   ERROR [Microservices:{"id":"d74bb0c2-6a3e-413f-87cf-0b5d7e748ad3"}] Unable to run job handler (generate-thumbnails): Error: heif: Memory allocation error: Security limit exceeded: Allocating 599270415 bytes exceeds the security limit of 536870912 bytes (6.1000)
immich_server            | Error: heif: Memory allocation error: Security limit exceeded: Allocating 599270415 bytes exceeds the security limit of 536870912 bytes (6.1000)

Additional information

No response

[simonhammes]

There is #19939 which would update sharp to 0.34.3 which would allow specifying an unlimited flag: lovell/sharp#4335

[MK73DS]

Is there something that needs to be done on the user side? I updated to 1.136.0 (after #19939 was merged) and I still have the same issue.

[simonhammes]

Is there something that needs to be done on the user side? I updated to 1.136.0 (after #19939 was merged) and I still have the same issue.

No, afaik Immich does not set the unlimited flag to disable libheif's security limit.

I could not reproduce the issue using the latest immich version from main. I tried with two large heic files (74MB and 113MB). How large are the files you're trying to upload?

And did you modify any thumbnail/quality settings? I used the default settings.

[MK73DS]

File size doesn't matter, it's the picture size that does: here is a picture where I covered the lens. Very small file size because the image is basically black, but very big picture size (200 Megapixels). Since heic is not supported on github, I had to put the image in a zip file.

20250727_125020.zip

immich_server            | Error: heif: Memory allocation error: Security limit exceeded: Allocating 599270415 bytes exceeds the security limit of 536870912 bytes (6.1000)
immich_server            |     at Sharp.toBuffer (/usr/src/app/server/node_modules/sharp/lib/output.js:163:17)
immich_server            |     at MediaRepository.decodeImage (/usr/src/app/server/dist/repositories/media.repository.js:105:68)
immich_server            |     at MediaService.decodeImage (/usr/src/app/server/dist/services/media.service.js:177:59)
immich_server            |     at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
immich_server            |     at async MediaService.generateImageThumbnails (/usr/src/app/server/dist/services/media.service.js:189:44)
immich_server            |     at async MediaService.handleGenerateThumbnails (/usr/src/app/server/dist/services/media.service.js:116:25)
immich_server            |     at async JobService.onJobStart (/usr/src/app/server/dist/services/job.service.js:198:28)
immich_server            |     at async EventRepository.onEvent (/usr/src/app/server/dist/repositories/event.repository.js:126:13)
immich_server            |     at async /usr/src/app/server/node_modules/bullmq/dist/cjs/classes/worker.js:499:32
immich_server            |     at async Worker.retryIfFailed (/usr/src/app/server/node_modules/bullmq/dist/cjs/classes/worker.js:775:24)

I indeed modified thumbnail settings: 4k for previews instead of 1440p and augmented the quality from 80 to 95 for both thumbnails and previews. After resetting the settings to their default value, the issue is the same and the logs as well.

[simonhammes]

@MK73DS Thank you, I've been able to reproduce the issue and will prepare a PR :)

EDIT: -> #20327

[MK73DS]

I can confirm this issue is fixed for me as of Immich v1.139.2!