Stack Overflow Vulnerability in libass Affects Multiple Versions
CVE-2020-24994

8.8HIGH

Key Information:

Vendor: Libass Project
Status: Libass
Vendor: CVE Published:; 23 March 2021

🔔 Create Libass Project Vulnerability Alert

What is CVE-2020-24994?

A stack overflow vulnerability exists in the parse_tag function located in libass/ass_parse.c for versions prior to 0.15.0. This flaw allows remote attackers to manipulate crafted files to trigger a denial of service or potentially execute arbitrary remote code. Exploitation of this vulnerability can compromise the integrity of the system, making it essential for users and administrators to upgrade to patched versions to mitigate risk.