Threats tagged 'ghsa-crhc-4fp3-m233'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.8	CVE-2026-124307Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability that allows attackers to corrupt memory Medium5.82026-11-07GCVE DatabaseCVE-2026-124307 Fraunhofer HHI VVdeC versions before 3.2.1 contain a heap use-after-free vulnerability. This flaw allows attackers to corrupt memory by redefining an ALF adaptation parameter set ID that is still referenced by slices. Exploitation involves supplying a crafted VVC bitstream that triggers multithreaded decoding to dereference freed APS objects, causing crashes or heap corruption. Report on CVE-2026-124307 Vulnerability CWE-416 #ghsa-crhc-4fp3-m233	GCVE Database	2026-11-07

Page 1 of 1