Read the docs

l-smash

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

l-smash records in CISA KEV

No l-smash vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-74093 CVE-2026-110599 · GHSA-4h8q-hwh6-8jpj

Double free in L-SMASH HEVC and H.264 importer probe

Priority MEDIUM 64

L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00243 Published 2026-10-14 No fix listed CWE-415
TI-2016-09370 CVE-2016-20099 · GHSA-wq77-gg6m-97hh

Infinite loop in L-SMASH VC-1 importer probe allows denial of service

Priority MEDIUM 63

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00237 Published 2026-10-14 No fix listed CWE-835
TI-2026-83848 CVE-2026-120456 · GHSA-q7pj-x362-2v3p

Heap out-of-bounds write in L-SMASH via hdlr and url boxes

Priority LOW 30

L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isom_read_hdlr() and isom_read_dref_entry() in core/read.c triggered by oversized box sizes.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00157 Published 2026-11-02 No fix listed CWE-787
Open these records in search →