CVE-2016-20099
L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe
l-smash l-smash
CVSS
6.8MediumExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 14 Oct 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.24%Chance of exploitation activity in the next 30 days, higher than 13% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmash_read_file() probes automatically, causing indefinite CPU consumption and denial of service.
Text from CVE List
Affected versions 1
- l-smashaffected: all versions through 2.14.5CVE List
References 5
- github.com/l-smash/l-smash/pull/58Fixvia CVE List
- hackmd.io/@haind-pwn/l-smash-hevc-importer-double-freeAdvisoryvia CVE List
- vulncheck.com/advisories/l-smash-through-2.14.5-infinite-loop-in-vc-1-importer-probeAdvisoryvia CVE List
- hackmd.io/@haind-pwn/cve-2016-20099-2026-110599-l-smash-hevc-importer-double-freeExploitvia CVE List
- github.com/l-smash/l-smash/blob/v2.14.5/importer/vc1_imp.c#L462-L488Referencevia CVE List