CVE-2020-24994

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

CVE-2020-26682

In libass 0.14.0, the ass_outline_construct's call to outline_stroke causes a signed integer overflow.