966 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fixed a use-after-free in sndusbmixerfree When sndusbcreatemixer fails, sndusbmixerfree frees mixer-idelems, but the controls that were previously added to the card still reference the freed memory. Later, when...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fixed an out-of-bounds read in sndusbgetaudioformatuac3 In sndusbgetaudioformatuac3, the length value returned from sndusbctlmsg is used directly for memory allocation without validation. This length is controlle...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fixed potential overflow of PCM transfer buffer The PCM stream data in the USB-audio driver is transferred via USB URB packet buffers, and the size of each packet is determined dynamically. The packet sizes are...
CVE-2026-89736
A flaw was found in the Linux kernel's USB audio gadget driver uaudio. This vulnerability occurs during sound card disconnection when Asynchronous Linux Sound Architecture ALSA control elements kctls remain open in userspace. A local attacker can exploit this timing issue by interacting with thes...
CVE-2026-69859
Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69707
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69687
Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69571
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69469
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-69413
Use after free in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69286
Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to disclose information locally...
CVE-2026-69270
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
EUVD-2026-73578
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69707
CVE-2026-69707 is an integer overflow or wraparound vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized, locally-privileged attacker to escalate privileges. The flaw is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, low privileges r...
EUVD-2026-73576
Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69571
CVE-2026-69571 is a heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to elevate privileges. The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user inte...
EUVD-2026-73535
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69286
CVE-2026-69286 is an out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to disclose information . The vulnerability is rated CVSS 3.1: 5.5 (MEDIUM) with a local attack vector, low complexity, and high confidentiality impact but no inte...