CVE-2026-124312: VVdeC/vvdecapp: Heap Out-of-Bounds Read in CodingStructure::getColInfo with a Smaller Collocated Picture
AI summarySummaries by Vani AI
CVE-2026-124312: VVdeC/vvdecapp: Heap Out-of-Bounds Read in CodingStructure::getColInfo with a Smaller Collocated Picture
Product: VVdeC (vvdecapp) Affected: Versions through 3.2.1 Reproduced build: 3.3.0-dev Commit d3049dc6ddccfacca90d8451123549b49f3b0f56 Fixed: 0695c06221c27b3680fec9851ac2cf46b2195ea9 CVE: CVE-2026-124312 CWE: CWE-125 (Out-of-bounds Read) CVSS 3.1: 4.7 MEDIUM (AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H) Reporter: Alexander A.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-124312 | Heap out-of-bounds read in Fraunhofer HHI VVdeC through 3.2.1 | 5.7 | — |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| sha1 | 0695c06221c27b3680fec9851ac2cf46b2195ea9 | -dev Commit d3049dc6ddccfacca90d8451123549b49f3b0f56 Fixed: 0695c06221c27b3680fec9851ac2cf46b2195ea9 CVE: CVE-2026-124312 CWE: CWE-125 (Out-of-bounds Read) CVSS |
| sha1 | d3049dc6ddccfacca90d8451123549b49f3b0f56 | : Versions through 3.2.1 Reproduced build: 3.3.0-dev Commit d3049dc6ddccfacca90d8451123549b49f3b0f56 Fixed: 0695c06221c27b3680fec9851ac2cf46b2195ea9 CVE: CVE-20 |
From the original article
Posted by Alexander A. Shvedov on Nov 11 Product: VVdeC (vvdecapp) Affected: Versions through 3. 2.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.