GHSA-g75c-jvvc-4qf4

Fraunhofer HHI VVdeC before version 3.2.1 contains a heap use-after-free vulnerability. An attacker can supply a crafted multi-subpicture VVC bitstream to decoders using two or more threads, causing heap memory corruption or a decoder crash.