In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.

This update for libass fixes the following issues :

CVE-2020-26682: Fixed a signed integer overflow in the call to outline_stroke() (bsc#1177862).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libass fixes the following issues :

  - CVE-2020-26682: Fixed a signed integer overflow in the     call to outline_stroke() (bsc#1177862).

This update was imported from the SUSE:SLE-15:Update update project.

The remote host is affected by the vulnerability described in GLSA-202012-12 (libass: User-assisted execution of arbitrary code)

    It was discovered that libass did not properly handle Advanced       Substation Alpha/Substation Alpha subtitle format files.
  Impact :

    A remote attacker could entice a user to process an a specially crafted       subtitle format file using an application linked against libass, possibly       resulting in execution of arbitrary code with the privileges of the       process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
148177	SUSE SLED15 / SLES15 Security Update : libass (SUSE-SU-2021:0936-1)	Nessus	SuSE Local Security Checks	high
148153	openSUSE Security Update : libass (openSUSE-2021-472)	Nessus	SuSE Local Security Checks	high
144591	GLSA-202012-12 : libass: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2020-26682

high

Tenable Plugins

high

high

high