Опубликовано: 20 июл. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8
CVSS3: 7.8
Описание
libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code not present |
| devel | not-affected | 1:0.15.2-1 |
| esm-apps-legacy/xenial | not-affected | code not present |
| esm-apps/bionic | not-affected | code not present |
| esm-apps/focal | not-affected | code not present |
| esm-apps/jammy | not-affected | 1:0.15.2-1 |
| esm-apps/xenial | not-affected | code not present |
| esm-infra-legacy/trusty | not-affected | code not present |
| focal | not-affected | code not present |
| groovy | ignored | end of life |
Показывать по
10
EPSS
Процентиль: 66%
0.01084
Низкий
6.8 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
CVSS3: 7.8
nvd
больше 5 лет назад
libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.
CVSS3: 7.8
debian
больше 5 лет назад
libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode ...
EPSS
Процентиль: 66%
0.01084
Низкий
6.8 Medium
CVSS2
7.8 High
CVSS3