Threats affecting pkg:github/libass/libass

CVE-2026-61627 is a high-severity out-of-bounds read and write vulnerability in libass, a subtitle renderer for ASS/SSA subtitle formats. Versions prior to 0.17.5 can overread and overwrite the glyph array during rendering of specially crafted subtitle content. This occurs in wrap modes other than two when a line ends with a literal backslash-n sequence and consists only of such sequences or spaces, causing loops to overshoot the glyph array by one. The vulnerability can lead to denial of service, with broader exploitation considered theoretical and constrained by memory protections. The issue is fixed in libass version 0.17.5.

CVE-2026-61626 is a high-severity out-of-bounds write vulnerability in libass, a subtitle renderer for ASS/SSA formats. Versions from 0.17.4 up to but not including 0.17.5 are affected. The flaw arises from insufficient validation of negative Matroska ReadOrder values during event pruning, which can lead to clearing bits near the NULL pointer. Exploitation requires a malicious Matroska stream and specific function usage. The primary impact on common systems is denial of service, with more severe exploitation considered theoretical and constrained. The issue is fixed in libass version 0.17.5.