Search
Find a vulnerability
Search criteria
Related vulnerabilities
OESA-2026-3199 (CVE-2026-61627)
Vulnerability from osv_openeuler – Published: 2026-08-01 11:12 – Updated: 2026-08-06 11:12 – Source website
VLAI
Summary
libass security update
Details
libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. It is mostly compatible with VSFilter.
Security Fix(es):
The vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)
Severity
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"libass-0.17.1-2.oe2403sp4.aarch64.rpm",
"libass-debuginfo-0.17.1-2.oe2403sp4.aarch64.rpm",
"libass-debugsource-0.17.1-2.oe2403sp4.aarch64.rpm",
"libass-devel-0.17.1-2.oe2403sp4.aarch64.rpm"
],
"noarch": [
"libass-help-0.17.1-2.oe2403sp4.noarch.rpm"
],
"src": [
"libass-0.17.1-2.oe2403sp4.src.rpm"
],
"x86_64": [
"libass-0.17.1-2.oe2403sp4.x86_64.rpm",
"libass-debuginfo-0.17.1-2.oe2403sp4.x86_64.rpm",
"libass-debugsource-0.17.1-2.oe2403sp4.x86_64.rpm",
"libass-devel-0.17.1-2.oe2403sp4.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:24.03-LTS-SP4",
"name": "libass",
"purl": "pkg:rpm/openEuler/libass\u0026distro=openEuler-24.03-LTS-SP4"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.17.1-2.oe2403sp4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. It is mostly compatible with VSFilter.\r\n\r\nSecurity Fix(es):\n\nThe vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)",
"id": "OESA-2026-3199",
"modified": "2026-08-06T11:12:04Z",
"published": "2026-08-01T11:12:04Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3199"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61627"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"type": "CVSS_V4"
}
],
"summary": "libass security update",
"upstream": [
"CVE-2026-61627"
]
}
OESA-2026-3200 (CVE-2026-61627)
Vulnerability from osv_openeuler – Published: 2026-08-01 11:12 – Updated: 2026-08-06 11:12 – Source website
VLAI
Summary
libass security update
Details
libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. It is mostly compatible with VSFilter.
Security Fix(es):
The vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)
Severity
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"libass-0.17.1-2.oe2403sp1.aarch64.rpm",
"libass-debuginfo-0.17.1-2.oe2403sp1.aarch64.rpm",
"libass-debugsource-0.17.1-2.oe2403sp1.aarch64.rpm",
"libass-devel-0.17.1-2.oe2403sp1.aarch64.rpm"
],
"noarch": [
"libass-help-0.17.1-2.oe2403sp1.noarch.rpm"
],
"src": [
"libass-0.17.1-2.oe2403sp1.src.rpm"
],
"x86_64": [
"libass-0.17.1-2.oe2403sp1.x86_64.rpm",
"libass-debuginfo-0.17.1-2.oe2403sp1.x86_64.rpm",
"libass-debugsource-0.17.1-2.oe2403sp1.x86_64.rpm",
"libass-devel-0.17.1-2.oe2403sp1.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:24.03-LTS-SP1",
"name": "libass",
"purl": "pkg:rpm/openEuler/libass\u0026distro=openEuler-24.03-LTS-SP1"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.17.1-2.oe2403sp1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. It is mostly compatible with VSFilter.\r\n\r\nSecurity Fix(es):\n\nThe vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)",
"id": "OESA-2026-3200",
"modified": "2026-08-06T11:12:04Z",
"published": "2026-08-01T11:12:04Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3200"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61627"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"type": "CVSS_V4"
}
],
"summary": "libass security update",
"upstream": [
"CVE-2026-61627"
]
}
OESA-2026-3201 (CVE-2026-61627)
Vulnerability from osv_openeuler – Published: 2026-08-01 11:12 – Updated: 2026-08-06 11:12 – Source website
VLAI
Summary
libass security update
Details
libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. It is mostly compatible with VSFilter.
Security Fix(es):
The vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)
Severity
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"libass-0.17.1-2.oe2403sp3.aarch64.rpm",
"libass-debuginfo-0.17.1-2.oe2403sp3.aarch64.rpm",
"libass-debugsource-0.17.1-2.oe2403sp3.aarch64.rpm",
"libass-devel-0.17.1-2.oe2403sp3.aarch64.rpm"
],
"noarch": [
"libass-help-0.17.1-2.oe2403sp3.noarch.rpm"
],
"src": [
"libass-0.17.1-2.oe2403sp3.src.rpm"
],
"x86_64": [
"libass-0.17.1-2.oe2403sp3.x86_64.rpm",
"libass-debuginfo-0.17.1-2.oe2403sp3.x86_64.rpm",
"libass-debugsource-0.17.1-2.oe2403sp3.x86_64.rpm",
"libass-devel-0.17.1-2.oe2403sp3.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:24.03-LTS-SP3",
"name": "libass",
"purl": "pkg:rpm/openEuler/libass\u0026distro=openEuler-24.03-LTS-SP3"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.17.1-2.oe2403sp3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. It is mostly compatible with VSFilter.\r\n\r\nSecurity Fix(es):\n\nThe vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)",
"id": "OESA-2026-3201",
"modified": "2026-08-06T11:12:04Z",
"published": "2026-08-01T11:12:04Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3201"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61627"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"type": "CVSS_V4"
}
],
"summary": "libass security update",
"upstream": [
"CVE-2026-61627"
]
}
UBUNTU-CVE-2026-61627 (CVE-2026-61627)
Vulnerability from osv_ubuntu – Published: 2026-07-14 00:00 – Updated: 2026-09-24 21:35 – Source website
VLAI
Details
[GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wrap_lines_measure]
Severity
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libass9",
"binary_version": "1:0.17.1-2ubuntu0.1~esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:24.04:LTS",
"name": "libass",
"purl": "pkg:deb/ubuntu/libass@1:0.17.1-2ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.17.1-2ubuntu0.1~esm1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:0.17.1-1",
"1:0.17.1-2",
"1:0.17.1-2build1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libass9",
"binary_version": "1:0.17.4-2ubuntu0.1~esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:26.04:LTS",
"name": "libass",
"purl": "pkg:deb/ubuntu/libass@1:0.17.4-2ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.17.4-2ubuntu0.1~esm1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:0.17.3-1",
"1:0.17.4-2"
]
}
],
"aliases": [],
"details": "[GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wrap_lines_measure]",
"id": "UBUNTU-CVE-2026-61627",
"modified": "2026-09-24T21:35:26Z",
"published": "2026-07-14T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-61627"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-61627"
},
{
"type": "REPORT",
"url": "https://github.com/libass/libass/security/advisories/GHSA-pjjp-65r7-ppgm"
},
{
"type": "REPORT",
"url": "https://github.com/libass/libass/commit/f2ef59755292bc4bb950ef22710e18a5487c399d"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8815-1"
}
],
"related": [
"USN-8815-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-61627"
]
}