Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how libass project compares to other vendors in security performance

View Risk Score →

redhat/libassThe wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cau…

Risk 45
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Libass released a new 0.13.4 version which fixes multiple issues. CVE-2016-7971 remains unfixed for now.

CVE-2016-7969 upstream patch:

https://github.com/libass/libass/pull/240/commits/b72b283b936a600c730e00875d7d067bded3fc26

CVE-2016-7970 upstream patch:

https://github.com/libass/libass/pull/240/commits/08e754612019ed84d1db0d1fc4f5798248decd75

CVE-2016-7972 upstream patch:

https://github.com/libass/libass/pull/240/commits/aa54e0b59200a994d50a346b5d7ac818ebcf2d4b

External References:

https://github.com/libass/libass/releases/tag/0.13.4

1 / 2
Source: Red Hat
First published (updated )
CVE-2016-7969

openSUSE LeapThe check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attacker…

Risk 43
Severity
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

The checkallocations function in libass/assshaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors.

First published (updated )
CVE-2016-7972

Fedoraproject FedoraBuffer Overflow

Risk 43
Severity
7.5
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Buffer overflow in the calccoeff function in libass/assblur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors.

First published (updated )
CVE-2016-7970

Libass Project LibassBuffer Overflow

Risk 68
Severity
7.8
Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars (called from decodefont and processtext) because the wrong integer data type is used for subtraction.

First published (updated )
CVE-2020-36430

Libass Project LibassInteger Overflow

Risk 77
Severity
8.8
Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow.

First published (updated )
CVE-2020-26682

Libass Project LibassStack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote…

Risk 77
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

First published (updated )
CVE-2020-24994

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203