Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 803119 (CVE-2020-36430) - <media-libs/libass-0.15.1: 1 byte heap overflow (CVE-2020-36430)
Summary: <media-libs/libass-0.15.1: 1 byte heap overflow (CVE-2020-36430)
Status: CONFIRMED
Alias: CVE-2020-36430
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL: https://bugs.chromium.org/p/oss-fuzz/...
Whiteboard: B3 [glsa?]
Keywords:
Depends on:
Blocks:
 
Reported: 2021-07-20 23:05 UTC by John Helmert III
Modified: 2021-07-29 18:09 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III gentoo-dev Security 2021-07-20 23:05:02 UTC
CVE-2020-36430 (https://github.com/libass/libass/commit/017137471d0043e0321e377ed8da48e45a3ec632):

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.

Seems like this was indeed fixed in 0.15.1, so please cleanup.
Comment 1 Larry the Git Cow gentoo-dev 2021-07-26 03:25:03 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c4bd74eb575a63959f5496507b6495bb895b6a38

commit c4bd74eb575a63959f5496507b6495bb895b6a38
Author:     John Helmert III <ajak@gentoo.org>
AuthorDate: 2021-07-25 21:26:52 +0000
Commit:     John Helmert III <ajak@gentoo.org>
CommitDate: 2021-07-26 03:13:01 +0000

    media-libs/libass: drop 0.15.0
    
    Bug: https://bugs.gentoo.org/803119
    Signed-off-by: John Helmert III <ajak@gentoo.org>

 media-libs/libass/Manifest             |  1 -
 media-libs/libass/libass-0.15.0.ebuild | 42 ----------------------------------
 2 files changed, 43 deletions(-)
Comment 2 NATTkA bot gentoo-dev 2021-07-29 17:20:50 UTC Comment hidden (obsolete)
Comment 3 NATTkA bot gentoo-dev 2021-07-29 17:28:56 UTC Comment hidden (obsolete)
Comment 4 NATTkA bot gentoo-dev 2021-07-29 17:36:53 UTC Comment hidden (obsolete)
Comment 5 NATTkA bot gentoo-dev 2021-07-29 17:44:55 UTC Comment hidden (obsolete)
Comment 6 NATTkA bot gentoo-dev 2021-07-29 17:52:59 UTC Comment hidden (obsolete)
Comment 7 NATTkA bot gentoo-dev 2021-07-29 17:56:54 UTC Comment hidden (obsolete)
Comment 8 NATTkA bot gentoo-dev 2021-07-29 18:00:54 UTC Comment hidden (obsolete)
Comment 9 NATTkA bot gentoo-dev 2021-07-29 18:09:12 UTC
Package list is empty or all packages have requested keywords.