185 matches found
Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 24.04 LTS / 26.04 LTS : libass vulnerabilities (USN-8815-1)
The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8815-1 advisory. It was discovered that libass incorrectly handled parsing operations for specific nested character string...
USN-8815-1: libass vulnerabilities
It was discovered that libass incorrectly handled parsing operations for specific nested character strings. An attacker could use this issue to cause libass to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,...
USN-8815-1 libass vulnerabilities
It was discovered that libass incorrectly handled parsing operations for specific nested character strings. An attacker could use this issue to cause libass to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,...
Astra Linux – Vulnerability in libass
A stack overflow occurred in the parsetag function in libass/assparse.c in libass before version 0.15.0. This vulnerability allows remote attackers to cause a denial of service or remote code execution through a crafted file...
Astra Linux – Vulnerability in libass
In libass 0.14.0, the call to assoutlineconstruct's outlinestroke function causes a signed integer overflow...
[SECURITY] [DLA 4769-1] libass security update
Debian LTS Advisory DLA-4769-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert September 02, 2026 https://wiki.debian.org/LTS Package : libass Version : 1:0.17.1-1+deb12u1 CVE ID : CVE-2026-61627 A vulnerability has been found in libass, a library for SSA/ASS...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libass (UTSA-2025-002290)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002290 advisory. libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libass (UTSA-2026-032348)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032348 advisory. In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. Tenable has extracted the preceding description block directly fr...
ANT-2026-9WB9SMM6 · libass · heap-buffer-overflow
heap-buffer-overflow high GHSA-pjjp-65r7-ppgm Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-9WB9SMM6: Heap-buffer-overflow in...
OESA-2026-3201 libass security update
libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. It is mostly compatible with VSFilter. Security Fixes: The vulnerability details have not been publicly disclosed yet.CVE-2026-61627...
OESA-2026-3200 libass security update
libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. It is mostly compatible with VSFilter. Security Fixes: The vulnerability details have not been publicly disclosed yet.CVE-2026-61627...
OESA-2026-3199 libass security update
libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. It is mostly compatible with VSFilter. Security Fixes: The vulnerability details have not been publicly disclosed yet.CVE-2026-61627...
Linux Distros Unpatched Vulnerability : CVE-2026-61627
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wraplinesmeasure CVE-2026-61627 Note that Nessus relies on the presence of the package as...
JLSEC-2026-154
Stack overflow in the parsetag function in libass/assparse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file...
JLSEC-2026-155
In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...
EUVD-2016-8817
Malware in sbrugna...
EUVD-2020-23958
Malware in sbrugna...
EUVD-2020-19224
Malware in sbrugna...