CVE-2026-61627
Description
A flaw was found in libass. An attacker could exploit this vulnerability by enticing a user to process a specially crafted subtitle file, triggering an out-of-bounds write during line measurement. Successful exploitation may result in arbitrary code execution or cause an application crash leading to a Denial of Service (DoS).
Statement
This vulnerability is rated as Important severity because memory corruption can occur when handling malformed subtitle data, creating a risk of arbitrary code execution or application crashes. Exploitation requires user interaction, as an attacker must convince a target to open or stream content with maliciously formatted Advanced Substation Alpha (ASS) subtitles. The libass library is not included in core Red Hat Enterprise Linux repositories, restricting impact primarily to systems utilizing packages from EPEL or Fedora.
Understanding the Weakness (CWE)
Integrity
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands
Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
Other
Technical Impact: Unexpected State
Subsequent write operations can produce undefined or unexpected results.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
