54 matches found
CVE-2026-25068 alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow
alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplgdecodecontrolmixer1 function reads the numchannels field from untrusted .tplg data and uses it as a loop bound without validating it...
CVE-2026-25068 alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow
alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplgdecodecontrolmixer1 function reads the numchannels field from untrusted .tplg data and uses it as a loop bound without validating it...
CVE-2026-25068
alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplgdecodecontrolmixer1 function reads the numchannels field from untrusted .tplg data and uses it as a loop bound without validating it...
EUVD-2026-4970
alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplgdecodecontrolmixer1 function reads the numchannels field from untrusted .tplg data and uses it as a loop bound without validating it...
CVE-2026-25068
Summary: CVE-2026-25068 affects alsa-lib versions 1.2.2 through 1.2.15.2 (before commit 5f7fe33). A heap-based buffer overflow in the topology mixer control decoder is caused by tplg_decode_control_mixer1() reading the untrusted num_channels from a .tplg file and using it as a loop bound without ...
ALSA-LIB: Input validation vulnerability
alsa-lib is an open-source library for ALSA Advanced Linux Sound Architecture in the user space. It is designed to simplify application programming and provide more advanced features. Versions of alsa-lib prior to 1.2.15.2 contained a vulnerability related to input validation errors. This...
Linux Distros Unpatched Vulnerability : CVE-2026-25068
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987602)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987602 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction AV/C deferred transactio...
alsa-plugins bug fix and enhancement update
An update is available for alsa-plugins. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The alsa-plugins packages contain alsa library extensions for the Advanc...
MDVA-2010:107 : pulseaudio
The version of PulseAudio shipped with 2010.0 has had numerous bug fixes since it was released. This updates the PulseAudio package to 0.9.21 which contains most of the bug fixes the package versions from 0.9.17 through 0.9.21 are all considered bugfix updates. Additional fixes from the upstream...
Mandriva Update for pulseaudio MDVA-2010:107 (pulseaudio)
Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVA-2010:107 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
Mandriva Update for pulseaudio MDVA-2010:107 (pulseaudio)
Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVA-2010:107 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
DEBIAN-CVE-2005-0087
The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library...
security flaw
The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library...