CVE-2020-36430: Buffer Overflow
Published Jul 20, 2021
·Updated
libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars (called from decodefont and processtext) because the wrong integer data type is used for subtraction.
Affected Software
2 affected components
Libass Project Libass>=0.15.0<0.15.1
Fedoraproject Fedora=34
Remediation
Patch Available
Event History
Jul 20, 2021
CVE Published
via MITRE·06:47 AM
Data Sourced
via MITRE·06:47 AM
Description
Frequently Asked Questions
1
What is CVE-2020-36430?
CVE-2020-36430 is a vulnerability in libass 0.15.x before 0.15.1 that allows for a heap-based buffer overflow.
2
How severe is CVE-2020-36430?
CVE-2020-36430 has a severity rating of 7.8 (High).
3
Which software versions are affected by CVE-2020-36430?
Versions 0.15.0 and earlier of libass are affected by CVE-2020-36430.
4
How can I fix CVE-2020-36430?
To fix CVE-2020-36430, update libass to version 0.15.1 or later.
5
Where can I find more information about CVE-2020-36430?
You can find more information about CVE-2020-36430 at the following references: [1], [2], [3].