CVE-2016-7969
HighSummary
The wrap_lines_smart function in ass_render.c in libass before version 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to '0/3 line wrapping equalization.'
Risk Assessment
An attacker could exploit this vulnerability to trigger a denial of service, potentially leading to downtime for applications using libass.
Recommendation
It is recommended to update libass to version 0.13.4 or later to mitigate this vulnerability.
Other vulnerabilities in libass
See all- CVE-2016-7972High
The check_allocations function in libass/ass_shaper.c in libass before version 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors.
- CVE-2016-7970High
Buffer overflow in the calc_coeff function in ass_blur.c in libass before version 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors.
Original NVD description (English source)
The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to "0/3 line wrapping equalization."