CVE-2026-110599 — L-SMASH through 2.14.5 Double Free in HEVC and H.264 Importer Probe
L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specifi…
Published: 2026-10-14 · CVSS: 6.9 · CVSS 4.0
L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex-B elementary stream lacking a parseable SPS to lsmash_read_file() or the boxdumper, remuxer, or muxer tools, causing use-after-free, heap corruption, and crashes.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7