JLSEC-2026-155

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...

Libass Integer Overflow Vulnerability

libass is a subtitle renderer based on the ASS/SSA format by an individual developer. A security vulnerability exists in libass version 0.14.0, which stems from a signed integer overflow due to a call to outline stroke by assoutlineconstruct. No details of the vulnerability are available at this...

DEBIAN-CVE-2020-26682

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...

UBUNTU-CVE-2020-26682

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...

PT-2020-16484

Name of the Vulnerable Software and Affected Versions libass version 0.14.0 Description The issue is caused by a signed integer overflow in the ass outline construct function's call to outline stroke. Recommendations For libass version 0.14.0, consider disabling the ass outline construct function...