libass vulnerabilities (CVE)

CVE records published for libass, newest first. Follow to get an email when a new one appears.

2 results
7.3High
CVE-2026-61627

libass: Out-of-bounds read and write in wrap_lines_measure

libass libass

libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in `wrap_lines_measure` while rendering malicious `ASS` content. In `wrap…