PT-2026-76994

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 Description A side-channel issue exists within the Web Audio component. A side-channel is a method of...

PT-2026-77014

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 Description A site isolation issue exists within the Audio/Video: Web Codecs component. Site isolation is a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102123 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing UAC2 rates at MAXNRRATES parseuac2sampleraterange caps the number o...

CVE-2026-74967: Origin Validation Error

Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

PT-2026-76931

Name of the Vulnerable Software and Affected Versions Grav versions prior to 2.0.15 Description Stored cross-site scripting occurs during the rendering of audio and video media via the sourceParsedownElement function. The issue arises because the media URL fragment is concatenated without being...

CVE-2026-74981: Origin Validation Error

Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102122 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out-of-bounds read in sndusbgetaudioformatuac3 In sndusbgetaudioformatuac3,...

Linux Distros Unpatched Vulnerability : CVE-2026-72445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream enable fails On enable, subs-opened is set...

ANT-2026-NGTJ413W · ffmpeg · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-NGTJ413W: This is a genuine heap-buffer-overflow...

ANT-2026-N0ZPQQQ6 · ffmpeg · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-N0ZPQQQ6: The ASAN report describes a real, plausible...

ANT-2026-8E67XSC7 · ffmpeg · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-8E67XSC7: Heap-buffer-overflow read in FFmpeg ADPCM...

CVE-2026-74499

A flaw was found in the kernel's Advanced Linux Sound Architecture ALSA USB audio driver. An integer overflow vulnerability in the sndusbmidiakaioutput function, when processing data from a USB device with a small bulk-OUT endpoint, can lead to an out-of-bounds write in the kernel heap. A local...

CVE-2026-74500

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver, specifically affecting RME Digiface devices. An unprivileged local user could exploit this vulnerability by reading the device status, which, due to an uninitialized buffer, may expose sensitive kernel...

CVE-2026-72445

A flaw was found in the Linux kernel's ALSA USB audio driver for QCOM devices. An attacker, by providing an invalid service interval during stream enablement, can cause the audio substream to become unresponsive. This can lead to a Denial of Service DoS for the affected audio device, requiring a...

kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. An inconsistency in how USB audio playback and capture streams are handled can lead to an out-of-bounds write to a memory buffer. This can result in a system crash, causing a denial of service for a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101172 advisory. Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1,...

USB-Audio Module Linux DoS

The vulnerability of the USB-Audio module in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100962 advisory. Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099891)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099891 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream runtime in sndpcmdrain In the drain loop, the loca...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100757 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans sndusbmidigetmsinfo validates the internal...