In libass 0.14.0, the ass_outline_construct's call to outline_stroke causes a signed integer overflow. (CVE-2020-26682)
ass_outline_construct
outline_stroke
{ "section": "core" }