Threats tagged 'ghsa-8xcr-xgj2-cmf5'

Fraunhofer HHI VVdeC versions through 3.2.1 have a NULL pointer dereference vulnerability in the InterPrediction::xPredInterBlk function. This flaw can be triggered by a crafted VVC bitstream that switches the Sequence Parameter Set (SPS) to enable reference wrap-around, causing the decoder to read from missing buffers and crash. The vulnerability leads to a denial of service condition without impacting confidentiality or integrity.