CVE-2020-24994
Summary
| CVE | CVE-2020-24994 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-03-23 20:15:00 UTC |
|---|
| Updated | 2022-07-22 13:19:00 UTC |
|---|
| Description | Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| stack-overflow on ass_parse.c:234 *parse_tag · Issue #422 · libass/libass · GitHub |
MISC |
github.com |
|
| stack-overflow on ass_parse.c:234 *parse_tag · Issue #422 · libass/libass · GitHub |
MISC |
github.com |
|
| parse_tags: don't recurse for nested \t() · libass/libass@6835731 · GitHub |
MISC |
github.com |
|
| stack-overflow on ass_parse.c:77 mystrcmp · Issue #423 · libass/libass · GitHub |
MISC |
github.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 750028 SUSE Enterprise Linux Security Update for libass (SUSE-SU-2021:1664-1)
- 750194 OpenSUSE Security Update for libass (openSUSE-SU-2021:0773-1)
- 750806 OpenSUSE Security Update for libass (openSUSE-SU-2021:1664-1)
