CVE-2026-124308

MEDIUM 5.8

Fraunhofer HHI VVdeC before 3.2.1 Use-After-Free via DecLibRecon::createSubPicRefBufs

CVSS Score

5.8

EPSS Score

0.0%

EPSS Percentile

0th

Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability in DecLibRecon::createSubPicRefBufs because decompressPicture clears m_subPicExtTasks without waiting for pending tasks. Attackers can supply a crafted multi-subpicture VVC bitstream to decoders using two or more threads, causing heap memory corruption or a decoder crash.

CWE	CWE-416
Vendor	fraunhoferhhi
Product	vvdec
Published	Nov 7, 2026

Stay Ahead of the Next One

Get instant alerts for fraunhoferhhi vvdec

Be the first to know when new medium vulnerabilities affecting fraunhoferhhi vvdec are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

Affected Versions

fraunhoferhhi / vvdec

0 < 3.2.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/fraunhoferhhi/vvdec/issues/403 github.com: https://github.com/fraunhoferhhi/vvdec/issues/392 github.com: https://github.com/fraunhoferhhi/vvdec/commit/8a0def8ba6050412d33e69a6f1e66e287b039083 github.com: https://github.com/fraunhoferhhi/vvdec/blob/v3.2.0/source/Lib/DecoderLib/DecLibRecon.cpp#L405-L420 github.com: https://github.com/fraunhoferhhi/vvdec/blob/v3.2.0/source/Lib/DecoderLib/DecLibRecon.cpp#L538-L542 github.com: https://github.com/fraunhoferhhi/vvdec vulncheck.com: https://www.vulncheck.com/advisories/fraunhofer-hhi-vvdec-before-3.2.1-use-after-free-via-declibrecon-createsubpicrefbufs

Credits

Alexander A. Shvedov (sigdevel)