CVE-2026-124308 | Fraunhofer HHI vvdec up to 3.2.0 DecLibRecon createSubPicRefBufs use after free

A vulnerability identified as problematic has been detected in Fraunhofer HHI vvdec up to 3.2.0. The impacted element is the function DecLibRecon::createSubPicRefBufs of the component DecLibRecon. This manipulation causes use after free.

This vulnerability is tracked as CVE-2026-124308. The attack is restricted to local execution. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More