| Package | Affected versions | Patched versions |
|---|---|---|
| libass | ≥ 0.15.0, < 0.15.1 | 0.15.1 |
libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free