Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: l-smash Clear all filters
TI-2026-83848 CVE-2026-120456 · GHSA-q7pj-x362-2v3p

Heap out-of-bounds write in L-SMASH via hdlr and url boxes

Priority LOW 30

L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isom_read_hdlr() and isom_read_dref_entry() in core/read.c triggered by oversized box sizes.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00157 Published 2026-11-02 No fix listed CWE-787
TI-2026-74093 CVE-2026-110599 · GHSA-4h8q-hwh6-8jpj

Double free in L-SMASH HEVC and H.264 importer probe

Priority MEDIUM 64

L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00243 Published 2026-10-14 No fix listed CWE-415
TI-2016-09370 CVE-2016-20099 · GHSA-wq77-gg6m-97hh

Infinite loop in L-SMASH VC-1 importer probe allows denial of service

Priority MEDIUM 63

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00237 Published 2026-10-14 No fix listed CWE-835