https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T15:43:25.927651+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02042 bdu:2022-02042 2026-10-22T15:43:26.191360+00:00 bdu:2022-02042 https://cve.radiocsirt.org/vuln/euvd-2026-48258 EUVD-2026-48258 2026-10-22T15:43:26.191400+00:00 EUVD-2026-48258 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36430 fkie_cve-2020-36430 2026-10-22T15:43:26.191415+00:00

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.

 https://cve.radiocsirt.org/vuln/ghsa-pqvw-6c6x-gvwh GHSA-pqvw-6c6x-gvwh 2026-10-22T15:43:26.191444+00:00

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.

 https://cve.radiocsirt.org/vuln/gsd-2020-36430 gsd-2020-36430 2026-10-22T15:43:26.191461+00:00 gsd-2020-36430 https://cve.radiocsirt.org/vuln/oesa-2021-1303 OESA-2021-1303 — libass security update 2026-10-22T15:43:26.191472+00:00

Affected: openEuler:20.03-LTS-SP2: libass

libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. It is mostly compatible with VSFilter. Security Fix(es): libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.(CVE-2020-36430)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1174-1 openSUSE-SU-2021:1174-1 — Security update for libass 2026-10-22T15:43:26.191496+00:00

Security update for libass

 https://cve.radiocsirt.org/vuln/suse-su-2021:2792-1 SUSE-SU-2021:2792-1 — Security update for libass 2026-10-22T15:43:26.191515+00:00

Security update for libass

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36430 Withdrawn: UBUNTU-CVE-2020-36430 2026-10-22T15:43:26.191531+00:00

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: libass

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.