CVE-2026-96674

The alsa-lib library, specifically versions through 1.2.16.1 , is vulnerable to an integer overflow in the src/topology/ctl.c component. The flaw occurs because the software uses 32-bit arithmetic to compute combined topology element sizes, which allows attackers to provide crafted topology files...