Skip to content
OpenAdvisories

Vendor

l-smash

3 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 6.1

    L-SMASH through 2.14.5 Heap Out-of-Bounds Write via hdlr and url Boxes

    L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isom_read_hdlr() and isom_read_dref_entry() in core/read.c triggered by oversized box sizes. Attackers can supply crafted MP4 or MOV files declaring hdlr or url box sizes larger than …

  • Medium 5.5

    L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe

    L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmash_read_file(…