Signed Integer Overflow in libass Affects Playable Media Processing
CVE-2020-26682

8.8HIGH

Key Information:

Vendor

Libass Project

Status
Libass
Vendor
CVE Published:
16 October 2020

What is CVE-2020-26682?

A vulnerability in libass, specifically in version 0.14.0, occurs due to a signed integer overflow triggered by the ass_outline_construct function's call to outline_stroke. This defect can lead to unexpected behavior in media rendering, potentially allowing attackers to manipulate media playback or execute further exploits. Users of this library should take immediate action to address this issue by applying patches available in the project's updates.

References

https://github.com/libass/libass/issues/431
x_refsource_MISC
https://github.com/libass/libass/pull/432
x_refsource_MISC
http://www.openwall.com/lists/oss-security/2020/11/19/7
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.