{
  "ticket_id": "CVE-2026-32738",
  "source": "cve",
  "cve_id": "CVE-2026-32738",
  "advisory_id": "GHSA-7f2h-cmpf-v9ww",
  "html_url": "https://github.com/strukturag/libheif/security/advisories/GHSA-7f2h-cmpf-v9ww",
  "references": [
    "https://github.com/strukturag/libheif/security/advisories/GHSA-7f2h-cmpf-v9ww",
    "https://nvd.nist.gov/vuln/detail/CVE-2026-32738",
    "https://github.com/strukturag/libheif"
  ],
  "severity": "medium",
  "cwe": ["CWE-191"],
  "cvss": {
    "nvd_v3_1_base_score": 6.5,
    "nvd_v3_1_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
  },
  "labels": ["security", "integer-underflow", "out-of-bounds-read", "denial-of-service", "libheif"],
  "state": "published"
}