CVE-2026-92705

A flaw was found in Aegisub. The application automatically loads and runs automation scripts referenced within Advanced SubStation Alpha ASS subtitle project files without prompting the user for confirmation. By tricking a user into opening a specially crafted subtitle file referencing a maliciou...

PT-2026-109323

Name of the Vulnerable Software and Affected Versions Aegisub versions 3.2.0 through 3.4.2 Description Aegisub automatically loads Automation scripts referenced by the Automation Scripts metadata in ASS subtitle projects without verifying user trust in the scripts or their authors. This allows an...

USN-8815-1: libass vulnerabilities

It was discovered that libass incorrectly handled parsing operations for specific nested character strings. An attacker could use this issue to cause libass to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,...