libass project records
6 published records for vendor libass project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-125 Out-of-bounds Read1
- CWE-190 Integer Overflow or Wraparound1
- CWE-399 Resource Management Errors1
- CWE-770 Allocation of Resources Without Limits or Throttling1
- CWE-787 Out-of-bounds Write1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2020-24994No exploit | Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service libass project · libass · CWE-770 | High8.8 | — | 2.6% | Mar 23, 2021 |
36Monitor | CVE-2020-26682No exploit | In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.libass project · libass · CWE-190 | High8.8 | — | 1.8% | Oct 16, 2020 |
32Monitor | CVE-2016-7972No exploit | The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory aopensuse · leap · CWE-399 | High7.5 | — | 5.3% | Mar 3, 2017 |
32Monitor | CVE-2016-7970No exploit | Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial of servicefedoraproject · fedora · CWE-119 | High7.5 | — | 5.2% | Mar 3, 2017 |
31Monitor | CVE-2016-7969No exploit | The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds reopensuse · leap · CWE-125 | High7.5 | — | 4.7% | Mar 3, 2017 |
31Monitor | CVE-2020-36430No exploit | libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong inlibass project · libass · CWE-787 | High7.8 | — | 1.0% | Jul 20, 2021 |
- CVE-2020-2499436Monitor
Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service
HighCVSS 8.8No exploitEPSS 2%libass project · libassMar 23, 2021
- CVE-2020-2668236Monitor
In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.
HighCVSS 8.8No exploitEPSS 1%libass project · libassOct 16, 2020
- CVE-2016-797232Monitor
The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory a
HighCVSS 7.5No exploitEPSS 5%opensuse · leapMar 3, 2017
- CVE-2016-797032Monitor
Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial of service
HighCVSS 7.5No exploitEPSS 5%fedoraproject · fedoraMar 3, 2017
- CVE-2016-796931Monitor
The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds re
HighCVSS 7.5No exploitEPSS 4%opensuse · leapMar 3, 2017
- CVE-2020-3643031Monitor
libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong in
HighCVSS 7.8No exploitEPSS 1%libass project · libassJul 20, 2021