CVE-2026-61626

libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. From 0.17.4 until 0.17.5, libass event pruning does not guard negative Matroska ReadOrder values, allowing an attacker to clear arbitrarily many bits to zero at attacker-controlled...

CVE-2026-61626 libass: Out-of-bounds bit clears for negative Matroska ReadOrder values

libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. From 0.17.4 until 0.17.5, libass event pruning does not guard negative Matroska ReadOrder values, allowing an attacker to clear arbitrarily many bits to zero at attacker-controlled...

CVE-2026-61626 libass: Out-of-bounds bit clears for negative Matroska ReadOrder values

libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. From 0.17.4 until 0.17.5, libass event pruning does not guard negative Matroska ReadOrder values, allowing an attacker to clear arbitrarily many bits to zero at attacker-controlled...

CVE-2026-61626

The libass subtitle renderer (versions 0.17.4 through 0.17.5 ) is vulnerable to an out-of-bounds bit clear because event pruning fails to guard negative Matroska ReadOrder values. An attacker can provide a malicious Matroska stream via ass_process_chunk with enabled read-order checking; subsequen...

CVE-2026-61626: libass: libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format

libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. From 0.17.4 until 0.17.5, libass event pruning does not guard negative Matroska ReadOrder values, allowing an attacker to clear arbitrarily many bits to zero at attacker-controlled...