https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T03:46:01.626727+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-124308 fkie_cve-2026-124308 2026-11-10T03:46:01.628376+00:00

Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability in DecLibRecon::createSubPicRefBufs because decompressPicture clears m_subPicExtTasks without waiting for pending tasks. Attackers can supply a crafted multi-subpicture VVC bitstream to decoders using two or more threads, causing heap memory corruption or a decoder crash.

 https://db.gcve.eu/vuln/ghsa-g75c-jvvc-4qf4 GHSA-g75c-jvvc-4qf4 2026-11-10T03:46:01.628561+00:00

Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability in DecLibRecon::createSubPicRefBufs because decompressPicture clears m_subPicExtTasks without waiting for pending tasks. Attackers can supply a crafted multi-subpicture VVC bitstream to decoders using two or more threads, causing heap memory corruption or a decoder crash.