Linux Distros Unpatched Vulnerability : CVE-2026-90781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name...

EulerOS 2.0 SP12 : alsa-lib (EulerOS-SA-2026-3322)

According to the versions of the alsa-lib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows...

EulerOS 2.0 SP12 : alsa-lib (EulerOS-SA-2026-3247)

According to the versions of the alsa-lib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows...

MGASA-2026-0369 Updated libalsa2 packages fix security vulnerabilities

alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow. CVE-2026-25068 ALSA Library 1.2.16.1 Double-Free via parsedef in conf.c. CVE-2026-56109...

Updated libalsa2 packages fix security vulnerabilities

alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow. CVE-2026-25068 ALSA Library 1.2.16.1 Double-Free via parsedef in conf.c. CVE-2026-56109...

Medium: alsa-lib

Issue Overview: The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration...

Medium: alsa-lib

Issue Overview: The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration...

Amazon Linux 2 : alsa-lib, --advisory ALAS2-2026-3874 (ALAS-2026-3874)

The version of alsa-lib installed on the remote host is prior to 1.1.4.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3874 advisory. The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf....

PT-2026-90856

Name of the Vulnerable Software and Affected Versions alsa-lib versions prior to 1.2.16.1 Description A stack buffer overflow exists in the snd ctl ascii elem id parse function. The issue is caused by an off-by-one error that writes one byte beyond a 64-byte buffer when parsing a name= field...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0960

Updates of 'coreutils', 'glib', 'rubygem-fluentd', 'alsa-lib', 'go' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2026-5.0-92-0941

Updates of 'alsa-lib' packages of Photon OS have been released...

alsa-lib: alsa-lib: Denial of Service via off-by-one stack buffer overflow

A flaw was found in alsa-lib. This vulnerability is an off-by-one stack buffer overflow in the sndctlasciielemidparse function. A local attacker can exploit this by supplying a specially crafted, long control-element identifier string through saved state files or command-line arguments. This can...

alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption

A flaw was found in the ALSA Advanced Linux Sound Architecture library. This double-free vulnerability, located in the parsedef function, allows a local attacker to corrupt memory by providing specially crafted ALSA configuration text. When processing nested configuration blocks, the library...

EulerOS 2.0 SP10 : alsa-lib (EulerOS-SA-2026-2680)

According to the versions of the alsa-lib packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer contro...

AZL-90204 CVE-2026-56109 affecting package alsa-lib for versions less than 1.2.16.1-1

The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parsedef...

EulerOS Virtualization 2.13.0 : alsa-lib (EulerOS-SA-2026-2157)

According to the versions of the alsa-lib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topolog...

CVE-2026-25068 affecting package alsa-lib for versions less than 1.2.9-2

CVE-2026-25068 affecting package alsa-lib for versions less than 1.2.9-2. A patched version of the package is available...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0755

Updates of 'nodejs', 'alsa-lib' packages of Photon OS have been released...

Debian dla-4469 : libasound2 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4469 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4469-1 [email protected] https://www.debian.org/lts/security/...

AZL-76295 CVE-2026-25068 affecting package alsa-lib for versions less than 1.2.6.1-3

alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplgdecodecontrolmixer1 function reads the numchannels field from untrusted .tplg data and uses it as a loop bound without validating it...