929 matches found
AudioServer-Voip-Recorder
Goal: Demonstrate VoIP stream capture by hooking Android's audioserver specifically libaudioflinger.so and recording uplink mic and downlink speaker PCM buffers when the system is in communication mode. Project Design & Methodology Architecture: Controller App Android UI with 9 buttons to manage...
AudioCaptchaBypass-CVE-2008-2019
Exploit for CVE-2008-2019 - Simple Machines Form SMF 1.1.4 and below. SMF uses an audio captcha made up of a woman's voice saying each letter of the alphabet. The user, who could be blind needs to type in these letters in order to pass the challenge response. The vulnerability identified by...
CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2023:1690294029)
The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2023:1690294029 advisory. - A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create...
CVE-2026-111150
ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBl...
CVE-2026-111150
The ValleyBell libvgm library (versions through commit a6eed945 ) contains a heap out-of-bounds read vulnerability within the PCM data-block decompressor. The root cause is an unbounded compression-table index ; specifically, a crafted .vgm file featuring a small type 0x7F table and wider compres...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ALSA: emu10k1: Fixed an out-of-bounds access in sndemu10k1pcmchannelalloc The voice allocator sometimes begins allocating from near the end of the array, and then wraps around. However, the sndemu10k1pcmchannelalloc function...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: ALSA: PCM: Fixed corruption of the wait queue list in sndpcmdrain, where linked streams were processed. sndpcmdrain uses initwaitqueueentry, which does not clear the entry.prev/next fields. Additionally, it uses addwaitqueue...
EUVD-2026-101077
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded URBs The USB 6fire driver uses URBs embedded in different structs for PCM, MIDI and communication, and this is basically a buggy implementation nowadays; since a URB is managed with a refcount, th...
CVE-2026-98428
The Linux kernel contains a vulnerability in the USB 6fire driver due to the use of embedded URBs (USB Request Blocks) within various structures for PCM, MIDI, and communication. Because URBs are managed with a reference count, this buggy implementation can lead to a Use-After-Free (UAF) conditio...
UBUNTU-CVE-2026-98428
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded URBs The USB 6fire driver uses URBs embedded in different structs for PCM, MIDI and communication, and this is basically a buggy implementation nowadays; since a URB is managed with a refcount, th...
PT-2026-114407
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The USB 6fire driver in the ALSA Advanced Linux Sound Architecture subsystem uses URBs USB Request Blocks embedded within different structures for PCM, MIDI, and communication. Because...
CVE-2026-90214
A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA System on Chip ASoC Xilinx formatter Pulse-Code Modulation PCM driver. During the opening of an audio stream, memory allocated for stream data is not properly released if an error occurs in a subsequent step. This can...
SUSE CVE-2026-98314
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer list while it still carries hw.cresolution = sndpcmtimerresolution an...
AZL-106380 CVE-2026-98314 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer list while it still carries hw.cresolution = sndpcmtimerresolution an...
DEBIAN-CVE-2026-98314
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer list while it still carries hw.cresolution = sndpcmtimerresolution an...
CVE-2026-98314
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer list while it still carries hw.cresolution = sndpcmtimerresolution an...
DEBIAN-CVE-2026-98308
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by...
CVE-2026-98308
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by...
UBUNTU-CVE-2026-98314
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer list while it still carries hw.cresolution = sndpcmtimerresolution an...
CVE-2026-98308
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by...