25 matches found
CVE-2026-90781-alsa-lib-oob
CVE-2026-90781 — alsa-lib 越界写入复现程序 针对 CVE-2026-90781 的独立 C 语言复现程序，该漏洞是 alsa-lib 的 sndctlasciielemidparse 在解析 name=（带引号和不带引号两种形式）时发生的 1 字节越界写入。 漏洞详情 在 src/control/ctlparse.c（v1.2.16.1 及更早的开发版 HEAD）中： char buf64; ... if size intsizeofbuf // BUG: allows size == 64 ptr++ = str; size++; ... ptr = '\0'...
CVE-2026-90781
alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...
CVE-2026-90781
alsa-lib through 1.2.16.1 contains an off-by-one stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function (in ctlparse.c). When parsing a name= field with 64 or more characters, the function writes one byte past a 64-byte stack buffer, overwriting adjacent stack memory and potentiall...
EUVD-2026-77008
alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...
PT-2026-90856
Name of the Vulnerable Software and Affected Versions alsa-lib versions prior to 1.2.16.1 Description A stack buffer overflow exists in the snd ctl ascii elem id parse function. The issue is caused by an off-by-one error that writes one byte beyond a 64-byte buffer when parsing a name= field...
ROS-20260721-73-0005
The vulnerability of the “Network” control element in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to replace the user’s interface with a specially created HTML page...
ROS-20260721-73-0026
The vulnerability of the “Network” control element in Google Chrome and Microsoft Edge relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through a specially created HTML...
CVE-2026-46088
A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA control component. Improper validation of the buffer length before a string length operation in the sndctleleminitenumnames function can lead to a system panic. This vulnerability could allow a local attacker to trigger...
The vulnerability of the “Network” control element in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.
The vulnerability of the “Network” control element in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to replace the user’s interface with a specially created HTML page...
The vulnerability of the History control element in Google Chrome allows a hacker to perform cross-site scripting attacks.
The vulnerability of the History control panel element in Google Chrome is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
CVE-2023-54212
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2023-54212
CVE-2023-54212 is rejected/not used as per the initial description.
PT-2025-53169
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the KVM component related to the s390 virtualization platform. Specifically, an incorrect index value can be assigned to a replaced ASCE Address...
ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...
ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...
ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...
ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...
ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...
ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
A use-after-free flaw was found in sndctlelemread in sound/core/control.c in Advanced Linux Sound Architecture ALSA subsystem in the Linux kernel. In this flaw a normal privileged, local attacker may impact the system due to a locking issue in the compat path, leading to a kernel information leak...