Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27629
HistoryOct 20, 2020 - 5:45 a.m.

Arbitrary Code Execution

2020-10-2005:45:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
libass.so
integer overflow
arbitrary code execution
software
outline_stroke
ass_outline_construct
host os.

EPSS

0.005

Percentile

75.8%

libass.so is vulnerable to arbitrary code execution. An integer overflow occurs during a call to outline_stroke that is made by ass_outline_construct, potentially allowing an attacker to execute arbitrary code on the host OS.