Threats tagged 'ghsa-fcm3-84wv-3v4w'

Fraunhofer HHI VVdeC versions through 3.2.1 have a heap out-of-bounds read vulnerability. This flaw allows attackers to crash the decoder by providing a collocated picture of a different resolution in a crafted VVC bitstream. The vulnerability occurs when TMVP is enabled and error concealment is active, causing the function getColInfo to read beyond allocated memory.