3 matches found
ALSA: fireworks: bound device-supplied status before string array lookup
...
7.3CVSS5.8AI score0.00125EPSS
SaveExploits0
CVE-2026-31619
In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status before string array lookup The status field in an EFW response is a 32-bit value supplied by the firewire device. efrstatusnames has 17 entries so a status value outside that range go...
5.5CVSS0.00125EPSS
SaveExploits0References9
CVE-2026-31619
In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status before string array lookup The status field in an EFW response is a 32-bit value supplied by the firewire device. efrstatusnames has 17 entries so a status value outside that range go...
5.5CVSS5.2AI score0.00125EPSS
SaveExploits0
20