EUVD-2026-77008

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

PT-2026-90856

Name of the Vulnerable Software and Affected Versions alsa-lib versions prior to 1.2.16.1 Description A stack buffer overflow exists in the snd ctl ascii elem id parse function. The issue is caused by an off-by-one error that writes one byte beyond a 64-byte buffer when parsing a name= field...