CVE-2020-36430

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for subtraction...

PT-2021-6688 · Libass +2 · Libsass +2

Name of the Vulnerable Software and Affected Versions: libass versions 0.15.x through 0.15.0 Description: The issue is related to the decode chars function of the libass subtitle renderer, which is used for ASS/SSA formats. It involves the use of an incorrect integer data type for subtraction,...

libass 缓冲区错误漏洞

libass is a subtitle renderer based on the ASS/SSA format by an individual developer. A security vulnerability exists in libass that stems from a heap-based buffer overflow because the wrong integer data type is used for subtraction...

openSUSE 15 Security Update : libass (openSUSE-SU-2021:1664-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1664-1 advisory. - Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remot...

openSUSE: Security Advisory for libass (openSUSE-SU-2021:1664-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:1664-1 Security update for libass

This update for libass fixes the following issues: - CVE-2020-24994: Fixed a stack overflow in the parsetag bsc1184153...

Security update for libass (moderate)

openSUSE Security Update: Security update for libass Announcement ID: openSUSE-SU-2021:1664-1 Rating: moderate References: 1184153 Cross-References: CVE-2020-24994 CVSS scores: CVE-2020-24994 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 An update th...

Advisory ROSA-SA-2021-1863

Software: libass 0.13.4 OS: Cobalt 7.9 CVE-ID: CVE-2020-24994 CVE-Crit: HIGH CVE-DESC: Stack overflow in the parsetag function in libass / assparse.c in libass before version 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file. CVE-STATUS: defau...

SUSE: Security Advisory (SUSE-SU-2021:1664-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libass (openSUSE-2021-773)

This update for libass fixes the following issues : - CVE-2020-24994: Fixed a stack overflow in the parsetag bsc1184153. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

SUSE SLED15 / SLES15 Security Update : libass (SUSE-SU-2021:1664-1)

This update for libass fixes the following issues : CVE-2020-24994: Fixed a stack overflow in the parsetag bsc1184153. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

OPENSUSE-SU-2021:0773-1 Security update for libass

This update for libass fixes the following issues: - CVE-2020-24994: Fixed a stack overflow in the parsetag bsc1184153. This update was imported from the SUSE:SLE-15:Update update project...

Security update for libass (moderate)

openSUSE Security Update: Security update for libass Announcement ID: openSUSE-SU-2021:0773-1 Rating: moderate References: 1184153 Cross-References: CVE-2020-24994 CVSS scores: CVE-2020-24994 SUSE: 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.2 An update th...

SUSE-SU-2021:1664-1 Security update for libass

This update for libass fixes the following issues: - CVE-2020-24994: Fixed a stack overflow in the parsetag bsc1184153...

SUSE: Security Advisory (SUSE-SU-2021:0936-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:3107-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for libass (openSUSE-SU-2021:0472-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : libass (SUSE-SU-2021:0936-1)

This update for libass fixes the following issues : CVE-2020-26682: Fixed a signed integer overflow in the call to outlinestroke bsc1177862. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

openSUSE Security Update : libass (openSUSE-2021-472)

This update for libass fixes the following issues : - CVE-2020-26682: Fixed a signed integer overflow in the call to outlinestroke bsc1177862. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

OPENSUSE-SU-2021:0472-1 Security update for libass

This update for libass fixes the following issues: - CVE-2020-26682: Fixed a signed integer overflow in the call to outlinestroke bsc1177862. This update was imported from the SUSE:SLE-15:Update update project...