Every CVE Search/ Get API key

CVE-2020-24994

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.14.0 allows...

8.8 HighFix available

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.65%Up 0.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.8

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

Record
CVE-2020-24994
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-770
Updated
2026-11-02
CVE List No score

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

Record
CVE-2020-24994
Updated
2026-11-02
EUVDEUVD-2020-17694 No score

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

Record
EUVD-2020-17694
Updated
2026-11-03
GitHub AdvisoriesGHSA-qrhf-wgfc-f8cx 8.8

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.14.0 allows...

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.14.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

Record
GHSA-qrhf-wgfc-f8cx
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSV 8.8

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

Record
CVE-2020-24994
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-24994 8.8

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

Record
DEBIAN-CVE-2020-24994
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVJLSEC-2026-154 8.8

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

Record
JLSEC-2026-154
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
OSVUBUNTU-CVE-2020-24994 8.8

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

Record
UBUNTU-CVE-2020-24994
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2021:0773-1 No score

Security update for libass

This update for libass fixes the following issues:

  • CVE-2020-24994: Fixed a stack overflow in the parse_tag (bsc#1184153).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:0773-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1664-1 No score

Security update for libass

This update for libass fixes the following issues:

  • CVE-2020-24994: Fixed a stack overflow in the parse_tag (bsc#1184153).
Record
openSUSE-SU-2021:1664-1
Updated
2026-11-02
OSVSUSE-SU-2021:1664-1 No score

Security update for libass

This update for libass fixes the following issues:

  • CVE-2020-24994: Fixed a stack overflow in the parse_tag (bsc#1184153).
Record
SUSE-SU-2021:1664-1
Updated
2026-11-02
OSVUSN-4797-1 No score

libass vulnerabilities

It was discovered that LibASS incorrectly handled certain ASS files. A remote attacker could possibly use this issue to cause a denial of service. One of the issues, CVE-2016-7970, only affected Ubuntu 16.04 ESM. (CVE-2016-7969, CVE-2016-7970, CVE-2016-7972)

It was discovered that LibASS incorrectly handled parsing operations for specific nested character strings. An attacker could possibly use this issue to cause a denial of service. This issue was only fixed in Ubuntu 16.04 LTS. (CVE-2020-24994)

Record
USN-4797-1
Updated
2026-11-02
OSVUSN-8815-1 No score

libass vulnerabilities

It was discovered that libass incorrectly handled parsing operations for specific nested character strings. An attacker could use this issue to cause libass to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-24994)

It was discovered that libass incorrectly handled certain outline processing operations. An attacker could use this issue to cause libass to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-26682)

It was discovered that libass incorrectly handled certain ASS subtitle files when measuring wrapped lines. An attacker could use this issue to cause libass to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-61627)

It was discovered that libass incorrectly handled certain Matroska subtitle chunks with negative ReadOrder values. An attacker could use this issue to cause libass to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-61626)

Record
USN-8815-1
Updated
2026-11-03

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libass
Debian:12
 before 1:0.15.0-1
1:0.15.0-1
libass
Debian:13
 before 1:0.15.0-1
1:0.15.0-1
libass
Debian:14
 before 1:0.15.0-1
1:0.15.0-1
libass_jll
Julia
 before 0.15.1+0
0.15.1+0
libass
SUSE:Linux Enterprise Module for Desktop Applications 15 SP2
 before 0.14.0-3.6.1
0.14.0-3.6.1
libass
SUSE:Linux Enterprise Module for Desktop Applications 15 SP3
 before 0.14.0-3.6.1
0.14.0-3.6.1
libass
Ubuntu:Pro:14.04:LTS
 before 0.10.1-3ubuntu1+esm2, plus listed versions
0.10.1-1ubuntu10.10.1-30.10.1-3ubuntu10.10.1-3ubuntu1+esm1
0.10.1-3ubuntu1+esm2
libass
Ubuntu:Pro:16.04:LTS
 before 0.13.1-1ubuntu0.1~esm2, plus listed versions
0.12.3-20.13.0-10.13.1-10.13.1-1ubuntu0.1~esm1
0.13.1-1ubuntu0.1~esm2
libass
Ubuntu:Pro:18.04:LTS
 before 1:0.14.0-1ubuntu0.1~esm1, plus listed versions
1:0.13.7-21:0.14.0-1
1:0.14.0-1ubuntu0.1~esm1
libass
Ubuntu:Pro:20.04:LTS
 before 1:0.14.0-2ubuntu0.1~esm1, plus listed versions
1:0.14.0-2
1:0.14.0-2ubuntu0.1~esm1
Show 9 moreShow less
Affected packages
PackageAffectedFixed
libass
Ubuntu:Pro:14.04:LTS
From an advisory covering 4 CVEs
 before 0.10.1-3ubuntu1+esm1, plus listed versions
0.10.1-1ubuntu10.10.1-30.10.1-3ubuntu1
0.10.1-3ubuntu1+esm1
libass
Ubuntu:Pro:16.04:LTS
From an advisory covering 4 CVEs
 before 0.13.1-1ubuntu0.1~esm2, plus listed versions
0.12.3-20.13.0-10.13.1-10.13.1-1ubuntu0.1~esm1
0.13.1-1ubuntu0.1~esm2
libass
Ubuntu:Pro:14.04:LTS
From an advisory covering 4 CVEs
 before 0.10.1-3ubuntu1+esm2, plus listed versions
0.10.1-1ubuntu10.10.1-30.10.1-3ubuntu10.10.1-3ubuntu1+esm1
0.10.1-3ubuntu1+esm2
libass
Ubuntu:Pro:18.04:LTS
From an advisory covering 4 CVEs
 before 1:0.14.0-1ubuntu0.1~esm1, plus listed versions
1:0.13.7-21:0.14.0-1
1:0.14.0-1ubuntu0.1~esm1
libass
Ubuntu:Pro:20.04:LTS
From an advisory covering 4 CVEs
 before 1:0.14.0-2ubuntu0.1~esm1, plus listed versions
1:0.14.0-2
1:0.14.0-2ubuntu0.1~esm1
libass
Ubuntu:Pro:24.04:LTS
From an advisory covering 4 CVEs
 before 1:0.17.1-2ubuntu0.1~esm1, plus listed versions
1:0.17.1-11:0.17.1-21:0.17.1-2build1
1:0.17.1-2ubuntu0.1~esm1
libass
Ubuntu:Pro:26.04:LTS
From an advisory covering 4 CVEs
 before 1:0.17.4-2ubuntu0.1~esm1, plus listed versions
1:0.17.3-11:0.17.4-2
1:0.17.4-2ubuntu0.1~esm1
libass
openSUSE:Leap 15.2
 before 0.14.0-lp152.4.6.1
0.14.0-lp152.4.6.1
libass
openSUSE:Leap 15.3
 before 0.14.0-3.6.1
0.14.0-3.6.1

History

History
RecordedChangedSources
affected
factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-24994 is a high vulnerability (CVSS 8.8) in Libass Project Libass, published March 23, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.65%, the 85th percentile. Fixed in libass 1:0.15.0-1.

References

Show 16 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open