Lucene search
+L

22 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/21 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-95127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c CVE-2026-95127 Note that...

7.5CVSS6AI score0.00435EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/15 6:34 p.m.•14 views

CVE-2026-95127

A flaw was found in libass. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS by providing specially crafted subtitle input. When processed by the outline construction routine assoutlineconstruct, the malformed data triggers an unexpected failure that causes the...

7.5CVSS5.8AI score0.00435EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•22 views

Astra Linux – Vulnerability in libass

In libass 0.14.0, the call to assoutlineconstruct's outlinestroke function causes a signed integer overflow...

8.8CVSS7.7AI score0.01802EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/10/14 12:48 a.m.•7 views

SUSE CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

5.9AI score0.00435EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/10/13 3:17 p.m.•21 views

DEBIAN-CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

7.5CVSS5.9AI score0.00435EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 3:17 p.m.•15 views

CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

7.5CVSS0.00435EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/10/13 3:17 p.m.•12 views

UBUNTU-CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

7.5CVSS5.9AI score0.00435EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/10/13 3:17 p.m.•11 views

CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

7.5CVSS5.9AI score0.00435EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

5.9AI score0.00435EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/13 12:00 a.m.•14 views

EUVD-2026-98802

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

5.9AI score0.00435EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-95127: Undefined Security Weakness

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

7.5CVSS5.9AI score0.00435EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

6.8CVSS5.9AI score0.00435EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/13 12:00 a.m.•45 views

CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

0.00435EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/13 12:00 a.m.•26 views

CVE-2026-95127

A flaw in libass v.0.17.5 allows a remote attacker to trigger a Denial of Service (DoS) . By providing specially crafted subtitle input, an attacker can cause the application to crash when processed by the ass_outline_construct() routine in libass/ass_render.c. No specific remediation or patch ve...

7.5CVSS5.9AI score0.00435EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•23 views

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libass (UTSA-2026-032348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032348 advisory. In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. Tenable has extracted the preceding description block directly fr...

8.8CVSS7.6AI score0.01802EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2020-26682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. CVE-2020-26682 Note that Nessus relies on the presence of th...

8.8CVSS7.7AI score0.01802EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•43 views

ASS/SSA Libass subtitle renderer Heap Buffer Overflow DoS

The vulnerability of the assoutlineconstruct function in the ASS/SSA Libass subtitle renderer is related to integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS8.1AI score0.01802EPSS
SaveExploits1References10Affected Software3
Veracode
Veracode
•added 2020/10/20 5:45 a.m.•28 views

Arbitrary Code Execution

libass.so is vulnerable to arbitrary code execution. An integer overflow occurs during a call to outlinestroke that is made by assoutlineconstruct, potentially allowing an attacker to execute arbitrary code on the host OS...

8.8CVSS7AI score0.01802EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2020/10/16 2:15 p.m.•32 views

CVE-2020-26682

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...

8.8CVSS6.6AI score0.01802EPSS
SaveExploits1References4
Prion
Prion
•added 2020/10/16 2:15 p.m.•35 views

Integer overflow

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...

6.8CVSS8.5AI score0.01802EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder