CVE-2026-45258

The FreeBSD sound(4) driver contains a memory-safety vulnerability in the dsp_mmap_single() function. A lack of proper overflow checking when summing user-supplied offset and length values allows these values to wrap around, passing validation. Subsequently, narrowing the offset from 64 to 32 bit...