Approved changes feed: RSS · Atom
cpe:2.3:a:l-smash:l-smash:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | L Smash (ec6d243a-24da-5f88-bf63-70653bf853d2) |
|---|---|
| Product | L Smash (a8b5cd9c-5243-592c-8634-66b23fa3b66c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-20099 |
vulnerable | 2026-11-03 10:37:54.991669 |
L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe
MEDIUM (5.5)
L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmash_read_file() probes automatically, causing indefinite CPU consumption and denial of service.
Published: 2026-10-14T14:16:26.855Z
Updated: 2026-10-14T17:44:42.067Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-110599 |
vulnerable | 2026-11-03 10:16:00.979062 |
L-SMASH through 2.14.5 Double Free in HEVC and H.264 Importer Probe
HIGH (7.1)
L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex-B elementary stream lacking a parseable SPS to lsmash_read_file() or the boxdumper, remuxer, or muxer tools, causing use-after-free, heap corruption, and crashes.
Published: 2026-10-14T14:16:41.692Z
Updated: 2026-10-14T16:16:31.026Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.