{
  "issue_id": "CVE-2026-32738",
  "ghsa_id": "GHSA-7f2h-cmpf-v9ww",
  "verdict": "REPRODUCED",
  "reproduction_successful": true,
  "confidence": "high",
  "vulnerable_version": {
    "version": "1.21.2",
    "tag": "v1.21.2",
    "result": "crash",
    "exit_code": 139,
    "signal": "SIGSEGV",
    "details": "Segmentation fault caused by integer underflow in Chunk constructor when samples_per_chunk=0, leading to out-of-bounds read on empty std::vector"
  },
  "fixed_version": {
    "version": "1.22.0",
    "tag": "v1.22.0",
    "result": "controlled_error",
    "exit_code": 1,
    "details": "File rejected gracefully with error message: 'stsc' box with zero samples per chunk entry."
  },
  "evidence_files": [
    "logs/vulnerable.log",
    "logs/fixed.log"
  ],
  "test_artifacts": {
    "patched_heif_file": "test_images/sequence_patched.heif",
    "harness_source": "seq_decode.c",
    "vulnerable_harness": "seq_decode_vuln",
    "fixed_harness": "seq_decode_fixed"
  },
  "notes": "The integer underflow vulnerability in libheif's Chunk constructor was successfully reproduced. A crafted HEIF sequence file with stsc box samples_per_chunk=0 causes the vulnerable version to SIGSEGV, while the fixed version properly validates and rejects the malformed input.",
  "timestamp": "2026-05-22T09:54:00Z"
}