CVE-2026-95127
UnknownSummary
An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c
Risk Assessment
An attacker can cause a crash or hang of an application using libass, leading to service unavailability.
Recommendation
Update libass to a patched version or restrict processing of untrusted input.
Other vulnerabilities in libass
See all- CVE-2016-7972High
The check_allocations function in libass/ass_shaper.c in libass before version 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors.
- CVE-2016-7970High
Buffer overflow in the calc_coeff function in ass_blur.c in libass before version 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors.
- CVE-2016-7969High
The wrap_lines_smart function in ass_render.c in libass before version 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to '0/3 line wrapping equalization.'
Original NVD description (English source)
An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c
Vulnerability data from NVD (NIST) · CISA KEV · EPSS