Vendor
L-SMASH versions through 2.14.5 contain a double free vulnerability in the NALU importer, allowing remote attackers to trigger heap corruption via a crafted Annex-B elementary stream.