173 matches found
Security update for libass (important)
openSUSE Security Update: Security update for libass Announcement ID: openSUSE-SU-2021:0472-1 Rating: important References: 1177862 Cross-References: CVE-2020-26682 CVSS scores: CVE-2020-26682 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-26682 SUSE: 7.8...
SUSE-SU-2021:0936-1 Security update for libass
This update for libass fixes the following issues: - CVE-2020-26682: Fixed a signed integer overflow in the call to outlinestroke bsc1177862...
DEBIAN-CVE-2020-24994
Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...
CVE-2020-24994
Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...
CVE-2020-24994
Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...
Stack overflow
Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...
CVE-2020-24994
Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...
CVE-2020-24994
CVE-2020-24994 is a stack overflow in libass/ass_parse.c parse_tag() affecting libass before 0.15.0. A crafted file can trigger denial of service or remote code execution. Multiple advisories reference fixes (e.g., openSUSE openSUSE-SU-2021:1664-1, Ubuntu USN-4797-1, OSV vulnerability page) with ...
CVE-2020-24994
Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...
CVE-2020-24994
Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...
libass 缓冲区错误漏洞
libass is an ASS/SSA format based subtitle renderer by an individual developer. A buffer error vulnerability exists in libass before 0.14.0 which allows remote attackers to cause a denial of service or remote code execution via a crafted file...
MGASA-2021-0017 Updated libass packages fix security vulnerability
In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. CVE-2020-26682...
Updated libass packages fix security vulnerability
In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. CVE-2020-26682...
GLSA-202012-12 : libass: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-202012-12 libass: User-assisted execution of arbitrary code It was discovered that libass did not properly handle Advanced Substation Alpha/Substation Alpha subtitle format files. Impact : A remote attacker could entice a user to...
libass: User-assisted execution of arbitrary code
Background libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. Description It was discovered that libass did not properly handle Advanced Substation Alpha/Substation Alpha subtitle format files. Impact A remote attacker could entice a...
[ASA-202011-19] libass: arbitrary code execution
Arch Linux Security Advisory ASA-202011-19 ========================================== Severity: Medium Date : 2020-11-19 CVE-ID : CVE-2020-26682 Package : libass Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1285 Summary ======= The package libass before...
libass:libass_fuzzer: Heap-buffer-overflow in decode_chars
Project: https://github.com/libass/libass.git Detailed Report: https://oss-fuzz.com/testcase?key=4806521227313152 Project: libass Fuzzing Engine: afl Fuzz Target: libassfuzzer Job Type: aflasanlibass Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x62b0000061fc Crash...
Libass Integer Overflow Vulnerability
libass is a subtitle renderer based on the ASS/SSA format by an individual developer. A security vulnerability exists in libass version 0.14.0, which stems from a signed integer overflow due to a call to outline stroke by assoutlineconstruct. No details of the vulnerability are available at this...