Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    OESA-2026-3199 (CVE-2026-61627)

    Vulnerability from osv_openeuler – Published: 2026-08-01 11:12 – Updated: 2026-08-06 11:12 – Source website
    VLAI
    Summary
    libass security update
    Details

    libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. It is mostly compatible with VSFilter.

    Security Fix(es):

    The vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)

    Severity
    7.3 (High)
    CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    References
    To clipboard 

    {
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "libass-0.17.1-2.oe2403sp4.aarch64.rpm",
          "libass-debuginfo-0.17.1-2.oe2403sp4.aarch64.rpm",
          "libass-debugsource-0.17.1-2.oe2403sp4.aarch64.rpm",
          "libass-devel-0.17.1-2.oe2403sp4.aarch64.rpm"
        ],
        "noarch": [
          "libass-help-0.17.1-2.oe2403sp4.noarch.rpm"
        ],
        "src": [
          "libass-0.17.1-2.oe2403sp4.src.rpm"
        ],
        "x86_64": [
          "libass-0.17.1-2.oe2403sp4.x86_64.rpm",
          "libass-debuginfo-0.17.1-2.oe2403sp4.x86_64.rpm",
          "libass-debugsource-0.17.1-2.oe2403sp4.x86_64.rpm",
          "libass-devel-0.17.1-2.oe2403sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP4",
        "name": "libass",
        "purl": "pkg:rpm/openEuler/libass\u0026distro=openEuler-24.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.1-2.oe2403sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha)  subtitle format. It is mostly compatible with VSFilter.\r\n\r\nSecurity Fix(es):\n\nThe vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)",
  "id": "OESA-2026-3199",
  "modified": "2026-08-06T11:12:04Z",
  "published": "2026-08-01T11:12:04Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3199"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61627"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "libass security update",
  "upstream": [
    "CVE-2026-61627"
  ]
}

    OESA-2026-3200 (CVE-2026-61627)

    Vulnerability from osv_openeuler – Published: 2026-08-01 11:12 – Updated: 2026-08-06 11:12 – Source website
    VLAI
    Summary
    libass security update
    Details

    libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. It is mostly compatible with VSFilter.

    Security Fix(es):

    The vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)

    Severity
    7.3 (High)
    CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    References
    To clipboard 

    {
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "libass-0.17.1-2.oe2403sp1.aarch64.rpm",
          "libass-debuginfo-0.17.1-2.oe2403sp1.aarch64.rpm",
          "libass-debugsource-0.17.1-2.oe2403sp1.aarch64.rpm",
          "libass-devel-0.17.1-2.oe2403sp1.aarch64.rpm"
        ],
        "noarch": [
          "libass-help-0.17.1-2.oe2403sp1.noarch.rpm"
        ],
        "src": [
          "libass-0.17.1-2.oe2403sp1.src.rpm"
        ],
        "x86_64": [
          "libass-0.17.1-2.oe2403sp1.x86_64.rpm",
          "libass-debuginfo-0.17.1-2.oe2403sp1.x86_64.rpm",
          "libass-debugsource-0.17.1-2.oe2403sp1.x86_64.rpm",
          "libass-devel-0.17.1-2.oe2403sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP1",
        "name": "libass",
        "purl": "pkg:rpm/openEuler/libass\u0026distro=openEuler-24.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.1-2.oe2403sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha)  subtitle format. It is mostly compatible with VSFilter.\r\n\r\nSecurity Fix(es):\n\nThe vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)",
  "id": "OESA-2026-3200",
  "modified": "2026-08-06T11:12:04Z",
  "published": "2026-08-01T11:12:04Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3200"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61627"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "libass security update",
  "upstream": [
    "CVE-2026-61627"
  ]
}

    OESA-2026-3201 (CVE-2026-61627)

    Vulnerability from osv_openeuler – Published: 2026-08-01 11:12 – Updated: 2026-08-06 11:12 – Source website
    VLAI
    Summary
    libass security update
    Details

    libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. It is mostly compatible with VSFilter.

    Security Fix(es):

    The vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)

    Severity
    7.3 (High)
    CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    References
    To clipboard 

    {
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "libass-0.17.1-2.oe2403sp3.aarch64.rpm",
          "libass-debuginfo-0.17.1-2.oe2403sp3.aarch64.rpm",
          "libass-debugsource-0.17.1-2.oe2403sp3.aarch64.rpm",
          "libass-devel-0.17.1-2.oe2403sp3.aarch64.rpm"
        ],
        "noarch": [
          "libass-help-0.17.1-2.oe2403sp3.noarch.rpm"
        ],
        "src": [
          "libass-0.17.1-2.oe2403sp3.src.rpm"
        ],
        "x86_64": [
          "libass-0.17.1-2.oe2403sp3.x86_64.rpm",
          "libass-debuginfo-0.17.1-2.oe2403sp3.x86_64.rpm",
          "libass-debugsource-0.17.1-2.oe2403sp3.x86_64.rpm",
          "libass-devel-0.17.1-2.oe2403sp3.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP3",
        "name": "libass",
        "purl": "pkg:rpm/openEuler/libass\u0026distro=openEuler-24.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.1-2.oe2403sp3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha)  subtitle format. It is mostly compatible with VSFilter.\r\n\r\nSecurity Fix(es):\n\nThe vulnerability details have not been publicly disclosed yet.(CVE-2026-61627)",
  "id": "OESA-2026-3201",
  "modified": "2026-08-06T11:12:04Z",
  "published": "2026-08-01T11:12:04Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3201"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61627"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "libass security update",
  "upstream": [
    "CVE-2026-61627"
  ]
}

    UBUNTU-CVE-2026-61627 (CVE-2026-61627)

    Vulnerability from osv_ubuntu – Published: 2026-07-14 00:00 – Updated: 2026-09-24 21:35 – Source website
    VLAI
    Details

    [GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wrap_lines_measure]

    Severity
    N/A (UNKNOWN)
    medium
    References
    To clipboard 

    {
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "libass9",
            "binary_version": "1:0.17.1-2ubuntu0.1~esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:24.04:LTS",
        "name": "libass",
        "purl": "pkg:deb/ubuntu/libass@1:0.17.1-2ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:0.17.1-2ubuntu0.1~esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:0.17.1-1",
        "1:0.17.1-2",
        "1:0.17.1-2build1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "libass9",
            "binary_version": "1:0.17.4-2ubuntu0.1~esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:26.04:LTS",
        "name": "libass",
        "purl": "pkg:deb/ubuntu/libass@1:0.17.4-2ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:0.17.4-2ubuntu0.1~esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:0.17.3-1",
        "1:0.17.4-2"
      ]
    }
  ],
  "aliases": [],
  "details": "[GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wrap_lines_measure]",
  "id": "UBUNTU-CVE-2026-61627",
  "modified": "2026-09-24T21:35:26Z",
  "published": "2026-07-14T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-61627"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61627"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/libass/libass/security/advisories/GHSA-pjjp-65r7-ppgm"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/libass/libass/commit/f2ef59755292bc4bb950ef22710e18a5487c399d"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8815-1"
    }
  ],
  "related": [
    "USN-8815-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-61627"
  ]
}