CyberSecBulletin

Libass vulnerabilities

We track 2 vulnerabilities in Libass products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Libass vulnerabilities

  • 7.3 High severity

    libass: Out-of-bounds Read

    CVE-2026-61627Libass

    libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in `wrap_lines_measure` while rendering malicious `ASS` content. In `wrap

  • 7.3 High severity

    libass: Out-of-bounds Write

    CVE-2026-61626Libass

    libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. From 0.17.4 until 0.17.5, libass event pruning does not guard negative Matroska `ReadOrder` values, allowing an attacker to clear arbitrarily m