CVE-2026-124311

The Fraunhofer HHI VVdeC decoder (versions through 3.2.1 ) contains a NULL pointer dereference vulnerability within the InterPrediction::xPredInterBlk function. An attacker can trigger a denial of service (crash) by providing a crafted VVC bitstream that switches the Sequence Parameter Set (SPS) ...