pipewire: Pulse Server alloca Stack Overflow

Multiple unbounded alloca calls in the PulseAudio protocol server...

pipewire: Pulse Server alloca Stack Overflow

Multiple unbounded alloca calls in the PulseAudio protocol server...

OESA-2026-4633 pipewire security update

is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: Multiple unbounded alloca calls in the PulseAudio protocol server.CVE-2026-14330 A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape...

OESA-2026-4632 pipewire security update

is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: Multiple unbounded alloca calls in the PulseAudio protocol server.CVE-2026-14330 A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape...

Rocky Linux 9.6 [TuxCare] Security Update: pipewire / pipewire-alsa / pipewire-devel / pipewire-doc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1788871614)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788871614 advisory. - RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. CVE-2026-14324 - Multiple unbounde...

AlmaLinux 9.6 [TuxCare] Security Update: pipewire / pipewire-alsa / pipewire-devel / pipewire-doc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1788871614)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788871614 advisory. - RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. CVE-2026-14324 - Multiple unbounded...

MGASA-2026-0443 Updated pipewire packages fix security vulnerabilities

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. CVE-2026-14324 Multiple unbounded alloca calls in the PulseAudio protocol server. CVE-2026-14330...

Updated pipewire packages fix security vulnerabilities

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. CVE-2026-14324 Multiple unbounded alloca calls in the PulseAudio protocol server. CVE-2026-14330...

CLSA-2026-1788871614 pipewire: Fix of 2 CVEs

CVE-2026-14324: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return - CVE-2026-14330: Multiple unbounded alloca calls in the PulseAudio protocol server...

pipewire: Pulse Server alloca Stack Overflow

Multiple unbounded alloca calls in the PulseAudio protocol server...

SUSE CVE-2026-14330

Multiple unbounded alloca calls in the PulseAudio protocol server...

Linux Distros Unpatched Vulnerability : CVE-2026-14330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple unbounded alloca calls in the PulseAudio protocol server. CVE-2026-14330 Note that Nessus relies on the presence of the package as reported by the...

CVE-2026-14330

Multiple unbounded alloca calls in the PulseAudio protocol server...

AZL-92012 CVE-2026-14330 affecting package pipewire 0.3.60-3

Multiple unbounded alloca calls in the PulseAudio protocol server...

CVE-2026-14330

Multiple unbounded alloca calls in the PulseAudio protocol server...

EUVD-2026-41007

Multiple unbounded alloca calls in the PulseAudio protocol server...

CVE-2026-14330

Multiple unbounded alloca calls in the PulseAudio protocol server...

CVE-2026-14330

Multiple unbounded alloca calls in the PulseAudio protocol server...

CVE-2026-14330

CVE-2026-14330 describes an issue in Pipewire’s PulseAudio protocol server, where multiple unbounded alloca() calls can cause a stack overflow. The affected component is the PulseAudio protocol server within Pipewire. Root cause: unbounded alloca() usage leading to potential stack overflow. Accor...

CVE-2026-14330

Multiple unbounded alloca calls in the PulseAudio protocol server. Mitigation No practical mitigation beyond upgrading. The PulseAudio protocol server is a core module required for PulseAudio application compatibility...