View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-7972 severity moderate: SUSE including 18 source package names (libass-devel-0.10.2-3.1, libass-devel-0.13.4-2.1, …), 43 product×package rows across 33 product lines (SUSE Linux Enterprise Desktop 12 SP1, SUSE Linux Enterprise Desktop 12 SP2, … (33 product lines)): Fixed 43.
The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors.