https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T10:49:45.726375+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-24994 CVE-2020-24994 2026-10-11T10:49:45.730448+00:00

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

 https://vulnerability.circl.lu/vuln/usn-4797-1 USN-4797-1 — libass vulnerabilities 2026-10-11T10:49:45.730530+00:00

Affected: Ubuntu:Pro:14.04:LTS: libass, Ubuntu:Pro:16.04:LTS: libass

It was discovered that LibASS incorrectly handled certain ASS files. A remote attacker could possibly use this issue to cause a denial of service. One of the issues, CVE-2016-7970, only affected Ubuntu 16.04 ESM. (CVE-2016-7969, CVE-2016-7970, CVE-2016-7972)

It was discovered that LibASS incorrectly handled parsing operations for specific nested character strings. An attacker could possibly use this issue to cause a denial of service. This issue was only fixed in Ubuntu 16.04 LTS. (CVE-2020-24994)