CVE-2016-20099

MediumCVSS 5.5

Published: 14/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

14th percentile - higher than 14% of all known CVEs

Summary

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c. Attackers can supply a file consisting only of zero bytes, which lsmash_read_file() probes automatically, causing indefinite CPU consumption and denial of service.

Risk Assessment

An attacker can hang applications that process media files, causing denial of service through indefinite CPU consumption. This affects availability of systems using L-SMASH for file parsing.

Recommendation

Update L-SMASH to a version newer than 2.14.5 if available, or restrict processing of untrusted input files. Consider implementing timeouts and process isolation for media file processing.

Other vulnerabilities in L-SMASH

CVE-2026-110599High
L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex-B elementary stream lacking a parseable SPS to lsmash_read_file() or the boxdumper, remuxer, or muxer tools, causing use-after-free, heap corruption, and crashes.

Original NVD description (English source)

L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmash_read_file() probes automatically, causing indefinite CPU consumption and denial of service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS