CVE-2020-36430

Published July 20th, 2021

View on NVD ↗

CVSS v3

7.8

HIGH

CVSS v2

6.8

MEDIUM

Affected

PROJECTS

Description

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.

google/oss-fuzz-vulns

OSS-Fuzz vulnerabilities for OSV.

GitHub

180

libass/libass

libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format.

GitHub

1.13K