CVE-2026-61627

The libass subtitle renderer (used in players like mpv , VLC , and FFmpeg ) contains a heap-buffer overflow in the wrap_lines_measure function. When rendering malicious ASS/SSA content, specifically lines ending with literal backslash-n sequences in certain wrap modes, the measurement loops can o...