VVdeC before 3.2.1 has heap use-after-free (CVE-2026-124307)
A crafted VVC bitstream that redefines an ALF APS can hit freed memory; the fix commit is 1eddb30.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
A crafted VVC bitstream that redefines an ALF APS can hit freed memory; the fix commit is 1eddb30.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views