CVE-2026-61626 | libass up to 0.17.4 Event Pruning ass_prune_events ReadOrder null pointer dereference

October 30, 2026 Yanac

A vulnerability was found in libass up to 0.17.4 and classified as problematic. The affected element is the function ass_prune_events of the component Event Pruning. Executing a manipulation of the argument ReadOrder can lead to null pointer dereference.

This vulnerability is registered as CVE-2026-61626. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More