CVE-2026-95127 Details

A denial-of-service vulnerability has been identified in libass version 0.17.5. The issue arises in the ass_outline_construct function within libass/ass_render.c, where remote attackers can exploit extreme values for script resolution, font size, margins, or layout. This exploitation causes a signed integer overflow in the bounding box calculations, leading to undefined behavior during normal subtitle rendering. The vulnerability can be reproduced with minimal, fully functional ASS files that trigger the overflow by manipulating these numeric extremes.

Users can update to the patched version of libass, which is available in the official libass repository. The specific commit addressing this vulnerability can be found in the libass/libass repository on GitHub.