VVdeC (Versions Through 3.2.1) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/vvdec-versions-through-3.2.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 19:16:13 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgVVdeC: NULL Pointer Dereference in InterPrediction (CVE-2026-124311)https://feed.craftedsignal.io/briefs/2026-11-vvdec-null-pointer/Mon, 09 Nov 2026 19:16:13 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-vvdec-null-pointer/A NULL pointer dereference vulnerability exists in the InterPrediction::xPredInterBlk function of the VVdeC (vvdecapp) video decoder, caused by a reference wrap-around in crafted VVC bitstreams.<p>A NULL pointer dereference vulnerability (CWE-476) has been identified in the VVdeC (vvdecapp) video decoder within the InterPrediction::xPredInterBlk function. The issue is triggered by crafted VVC bitstreams that induce a reference wrap-around. The vulnerability is addressed in commit fb73aca37b48f89814f57edbc8072a37d47bbe06.</p> lowadvisory