Security update for libass (important)

openSUSE Security Update: Security update for libass Announcement ID: openSUSE-SU-2021:0472-1 Rating: important References: 1177862 Cross-References: CVE-2020-26682 CVSS scores: CVE-2020-26682 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-26682 SUSE: 7.8...

SUSE-SU-2021:0936-1 Security update for libass

This update for libass fixes the following issues: - CVE-2020-26682: Fixed a signed integer overflow in the call to outlinestroke bsc1177862...

DEBIAN-CVE-2020-24994

Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...

CVE-2020-24994

Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...

CVE-2020-24994

Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...

Stack overflow

Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...

CVE-2020-24994

Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...

CVE-2020-24994

CVE-2020-24994 is a stack overflow in libass/ass_parse.c parse_tag() affecting libass before 0.15.0. A crafted file can trigger denial of service or remote code execution. Multiple advisories reference fixes (e.g., openSUSE openSUSE-SU-2021:1664-1, Ubuntu USN-4797-1, OSV vulnerability page) with ...

CVE-2020-24994

Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...

CVE-2020-24994

Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...

CVE-2020-24994

Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...

CVE-2020-24994: Allocation of Resources Without Limits or Throttling

Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...

libass buffer error vulnerability

libass is an ASS/SSA format based subtitle renderer by an individual developer. A buffer error vulnerability exists in libass before 0.14.0 which allows remote attackers to cause a denial of service or remote code execution via a crafted file...

libass:libass_fuzzer: Heap-buffer-overflow in fnv_32a_buf

Project: https://github.com/libass/libass.git Detailed Report: https://oss-fuzz.com/testcase?key=5450564718690304 Project: libass Fuzzing Engine: libFuzzer Fuzz Target: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Updated libass packages fix security vulnerability

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. CVE-2020-26682...

MGASA-2021-0017 Updated libass packages fix security vulnerability

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. CVE-2020-26682...

GLSA-202012-12 : libass: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202012-12 libass: User-assisted execution of arbitrary code It was discovered that libass did not properly handle Advanced Substation Alpha/Substation Alpha subtitle format files. Impact : A remote attacker could entice a user to...

libass: User-assisted execution of arbitrary code

Background libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. Description It was discovered that libass did not properly handle Advanced Substation Alpha/Substation Alpha subtitle format files. Impact A remote attacker could entice a...

[ASA-202011-19] libass: arbitrary code execution

Arch Linux Security Advisory ASA-202011-19 ========================================== Severity: Medium Date : 2020-11-19 CVE-ID : CVE-2020-26682 Package : libass Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1285 Summary ======= The package libass before...

libass:libass_fuzzer: Heap-buffer-overflow in decode_chars

Project: https://github.com/libass/libass.git Detailed Report: https://oss-fuzz.com/testcase?key=4806521227313152 Project: libass Fuzzing Engine: afl Fuzz Target: libassfuzzer Job Type: aflasanlibass Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x62b0000061fc Crash...