CVE-2026-124310

Fraunhofer HHI VVdeC versions prior to 3.2.1 are vulnerable to an out-of-bounds read in the Slice::getRefPic function. The root cause is a lack of proper validation when processing bitstreams with overlapping slice CTU coverage; specifically, an attacker can craft a second slice where a bi-predic...