VVdeC (Vvdecapp) Versions Before 3.2.1 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/vvdec-vvdecapp-versions-before-3.2.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 23:17:40 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgVVdeC: Heap use-after-free in AdaptiveLoopFilter (CVE-2026-124307)https://feed.craftedsignal.io/briefs/2026-11-vvdec-uaf/Mon, 09 Nov 2026 23:17:40 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-vvdec-uaf/A heap use-after-free vulnerability in the VVdeC decoder (vvdecapp) occurs in AdaptiveLoopFilter::reconstructCoeff due to ALF APS redefinition.A heap use-after-free vulnerability (CWE-416) has been identified in VVdeC (vvdecapp) within the AdaptiveLoopFilter::reconstructCoeff function, triggered by a crafted VVC bitstream that performs an ALF (Adaptive Loop Filter) APS (Adaptation Parameter Set) redefinition.

Affected versions include versions before 3.2.1. The issue was fixed in commit 1eddb30c4b8e02f3d13ba24aa7e52f1aa7b08c01.

]]>lowadvisoryvulnerabilitymemory-corruption