CVE-2016-7970

CVE-2016-7970 affects libass before 0.13.4; a buffer overflow in calc_coeff (libass/ass_blur.c) allows remote denial of service. Documented fixes upgrade LibASS to 0.13.4 (and related advisories). Practical impact: remote attacker could cause DoS via unspecified vectors. Remediation: update to li...

CVE-2016-7972

CVE-2016-7972 affects libass prior to 0.13.4. The vulnerability is in check_allocations (libass/ass_shaper.c) and can allow a remote attacker to cause a denial of service via a memory allocation failure. Remediation: upgrade to libass 0.13.4 or later (per multiple advisories: Gentoo GLSA-201702-2...

CVE-2016-7969

Summary of CVE-2016-7969 : The vulnerability affects libass prior to version 0.13.4, specifically the wrap_lines_smart function in ass_render.c. A remote attacker could trigger an out-of-bounds read, leading to a denial of service. The issue is documented across multiple advisories and OS feeds. ...