Skip to content
OpenAdvisories

Package · Debian

libass

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.3
    CVE-2026-61627

    libass: Out-of-bounds read and write in wrap_lines_measure

    libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in `wrap_lines_measure` while rendering malicious `ASS` content. In `wrap…

    libass libass libass libass Debian Ubuntu
  • High 7.3
    CVE-2026-61626

    libass: Out-of-bounds bit clears for negative Matroska ReadOrder values

    libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. From 0.17.4 until 0.17.5, libass event pruning does not guard negative Matroska `ReadOrder` values, allowing an attacker to clear arbitrarily …

    libass libass libass libass Debian Ubuntu
  • High 7.5
    CVE-2026-95127

    An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in li…

    libass libass Debian Ubuntu