Threats tagged 'ghsa-4jc3-2h8h-765r'

Fraunhofer HHI VVdeC versions before 3.2.1 have an out-of-bounds read vulnerability that can cause the decoder to crash. This occurs when attackers supply bitstreams with overlapping slice CTU coverage, leading to a negative reference index in a bi-predicted BDOF coding unit. The flaw triggers an out-of-bounds read in the Slice::getRefPic function, resulting in a denial of service via decoder crash.