Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2020-24994: stack-overflow on ass_parse.c:234 *parse_tag · Issue #422 · libass/libass

Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.

CVE
#vulnerability#dos#rce

Description
A vulnerability was found in function parse_tag in ass_parse.c:234 ,which allow attackers to cause a denial of service or remote code execution via a crafted file.

test@test:~/libass-0.14.0/afl$ ./a.out crash/poc
======================= INFO =========================
This binary is built for AFL-fuzz.
To run the target function on individual input(s) execute this:
./a.out < INPUT_FILE
or
./a.out INPUT_FILE1 [INPUT_FILE2 … ]
To fuzz with afl-fuzz execute this:
afl-fuzz [afl-flags] ./a.out [-N]

afl-fuzz will run N iterations before re-spawning the process (default: 1000)
======================================================

Reading 50635 bytes from crash/poc

ASAN:DEADLYSIGNAL
=================================================================

==64283==ERROR: AddressSanitizer: stack-overflow on address 0x7fff99b2bff8 (pc 0x00000046724b bp 0x7fff99b2fcf0 sp 0x7fff99b2c000 T0)
    #0 0x46724a in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:234
    #1 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #2 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #3 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #4 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #5 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #6 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #7 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #8 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #9 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #10 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #11 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #12 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #13 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #14 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #15 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #16 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #17 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #18 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #19 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #20 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #21 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #22 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #23 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #24 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #25 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #26 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #27 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #28 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #29 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #30 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #31 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #32 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #33 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #34 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #35 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #36 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #37 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #38 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #39 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #40 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #41 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #42 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #43 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #44 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #45 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #46 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #47 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #48 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #49 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #50 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #51 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #52 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #53 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #54 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #55 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #56 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #57 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #58 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #59 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #60 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #61 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #62 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #63 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #64 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #65 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #66 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #67 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #68 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #69 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #70 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #71 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #72 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #73 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #74 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #75 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #76 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #77 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #78 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #79 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #80 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #81 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #82 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #83 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #84 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #85 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #86 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #87 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #88 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #89 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #90 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #91 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #92 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #93 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #94 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #95 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #96 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #97 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #98 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #99 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #100 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #101 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #102 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #103 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #104 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #105 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #106 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #107 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #108 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #109 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #110 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #111 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #112 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #113 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #114 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #115 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #116 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #117 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #118 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #119 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #120 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #121 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #122 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #123 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #124 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #125 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #126 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #127 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #128 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #129 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #130 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #131 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #132 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #133 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #134 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #135 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #136 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #137 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #138 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #139 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #140 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #141 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #142 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #143 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #144 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #145 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #146 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #147 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #148 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #149 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #150 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #151 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #152 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #153 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #154 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #155 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #156 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #157 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #158 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #159 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #160 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #161 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #162 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #163 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #164 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #165 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #166 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #167 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #168 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #169 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #170 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #171 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #172 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #173 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #174 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #175 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #176 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #177 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #178 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #179 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #180 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #181 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #182 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #183 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #184 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #185 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #186 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #187 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #188 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #189 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #190 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #191 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #192 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #193 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #194 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #195 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #196 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #197 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #198 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #199 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #200 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #201 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #202 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #203 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #204 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #205 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #206 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #207 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #208 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #209 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #210 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #211 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #212 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #213 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #214 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #215 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #216 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #217 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #218 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #219 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #220 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #221 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #222 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #223 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #224 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #225 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #226 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #227 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #228 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #229 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #230 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #231 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #232 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #233 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #234 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #235 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #236 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #237 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #238 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #239 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #240 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #241 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #242 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #243 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #244 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #245 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #246 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #247 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #248 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #249 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654
    #250 0x4737a1 in parse_tag /home/test/libass-0.14.0/libass/ass_parse.c:654

SUMMARY: AddressSanitizer: stack-overflow /home/test/libass-0.14.0/libass/ass_parse.c:234 in parse_tag
==64283==ABORTING

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907