https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:46:38.011246+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06708 bdu:2026-06708 2026-10-03T22:46:38.160798+00:00 bdu:2026-06708 https://cve.radiocsirt.org/vuln/bell-cve-2026-25068 BELL-CVE-2026-25068 2026-10-03T22:46:38.160835+00:00

Affected: Alpaquita:23: alsa-lib, Alpaquita:25: alsa-lib, Alpaquita:stream: alsa-lib

 https://cve.radiocsirt.org/vuln/euvd-2026-321164 EUVD-2026-321164 2026-10-03T22:46:38.160865+00:00 EUVD-2026-321164 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25068 fkie_cve-2026-25068 2026-10-03T22:46:38.160878+00:00

alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.

 https://cve.radiocsirt.org/vuln/ghsa-x6vq-264g-8wcx GHSA-x6vq-264g-8wcx 2026-10-03T22:46:38.160904+00:00

alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.

 https://cve.radiocsirt.org/vuln/oesa-2026-1582 OESA-2026-1582 — alsa-lib security update 2026-10-03T22:46:38.160922+00:00

Affected: openEuler:20.03-LTS-SP4: alsa-lib, openEuler:22.03-LTS-SP4: alsa-lib, openEuler:24.03-LTS: alsa-lib, openEuler:24.03-LTS-SP1: alsa-lib, openEuler:24.03-LTS-SP2: alsa-lib, openEuler:24.03-LTS-SP3: alsa-lib

The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib

Security Fix(es):

alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.(CVE-2026-25068)

 https://cve.radiocsirt.org/vuln/rhsa-2026:7401 RHSA-2026:7401 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T22:46:38.160957+00:00

alsa-lib: alsa-lib Topology Decoder Heap-based Buffer Overflow

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-25068 UBUNTU-CVE-2026-25068 2026-10-03T22:46:38.160974+00:00

Affected: Ubuntu:Pro:20.04:LTS: alsa-lib, Ubuntu:22.04:LTS: alsa-lib, Ubuntu:24.04:LTS: alsa-lib, Ubuntu:25.10: alsa-lib, Ubuntu:26.04:LTS: alsa-lib

alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.