=== Variant Reproduction 2026-05-22T10:42:17+00:00 ===

--- Variant 1 (stsc=1) vulnerable ---
Track handler: pict
Exit code: 139

--- Variant 1 (stsc=1) fixed ---
Error reading file: Invalid input: Unspecified: Number of samples covered by 'stsc' does not match 'stsz'/'stts'.
Exit code: 1

--- Variant 2b (stco=0) vulnerable ---
Track handler: pict
Exit code: 139

--- Variant 2b (stco=0) fixed ---
Error reading file: Invalid input: Unspecified: Number of samples covered by 'stsc' does not match 'stsz'/'stts'.
Exit code: 1

--- Variant 3b (stsz=3) vulnerable single-frame ---
Track handler: pict
Decoded image successfully.
Exit code: 0

--- Variant 3b (stsz=3) vulnerable multi-frame ---
Exit code: 139

--- Variant 3b (stsz=3) fixed multi-frame ---
Error reading file: Invalid input: Unspecified: Number of samples covered by 'stsc' does not match 'stsz'/'stts'.
Exit code: 1

--- CLI entrypoint (heif-dec --ignore-editlist) vulnerable ---
Exit code: 139

--- CLI entrypoint (heif-dec --ignore-editlist) fixed ---
Could not read HEIF/AVIF file: Invalid input: Unspecified: Number of samples covered by 'stsc' does not match 'stsz'/'stts'.
Exit code: 1

=== End Variant Reproduction ===