In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2020/11/19/7 | Exploit Issue Tracking Mailing List Third Party Advisory |
https://github.com/libass/libass/issues/431 | Exploit Issue Tracking Third Party Advisory |
https://github.com/libass/libass/pull/432 | Issue Tracking Third Party Advisory |
https://security.gentoo.org/glsa/202012-12 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2020-10-16T13:19:23
Updated: 2020-12-23T21:06:27
Reserved: 2020-10-07T00:00:00
Link: CVE-2020-26682
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-10-16T14:15:11.893
Modified: 2022-06-15T03:12:52.113
Link: CVE-2020-26682
JSON object: View
Redhat Information
No data.
CWE