CyberSecBulletin

L-smash vulnerabilities

We track 1 vulnerability in L-smash products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest L-smash vulnerabilities

  • 7.1 High severity

    l-smash: Double Free

    CVE-2026-110599L-smash

    L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex-B elementary stream