Cpe:2.3:a:l-Smash_project:l-Smash:*:*:*:*:*:*:*:*

L-SMASH versions through 2.14.5 contain a double free vulnerability in the NALU importer, allowing remote attackers to trigger heap corruption via a crafted Annex-B elementary stream.