Most recent entries from all

ALSA-2026:61240 — Moderate: pipewire security update

Affected: AlmaLinux:9: pipewire, AlmaLinux:9: pipewire-alsa, AlmaLinux:9: pipewire-devel, AlmaLinux:9: pipewire-gstreamer, AlmaLinux:9: pipewire-jack-audio-connection-kit, AlmaLinux:9: pipewire-jack-audio-connection-kit-devel, AlmaLinux:9: pipewire-jack-audio-connection-kit-libs, AlmaLinux:9: pipewire-libs, AlmaLinux:9: pipewire-module-x11, AlmaLinux:9: pipewire-pulseaudio and 1 more

PipeWire is a multimedia server for Linux and other Unix like operating systems.

Security Fix(es):

* pipewire: RAOP RTSP NULL Deref (CVE-2026-14324) * pipewire: Pulse Server alloca Stack Overflow (CVE-2026-14330)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

EUVD-2026-361716

fkie_cve-2026-14330

Multiple unbounded alloca() calls in the PulseAudio protocol server.

GHSA-26rf-3h26-fc3w

Multiple unbounded alloca() calls in the PulseAudio protocol server.

RHSA-2026:61240 — Red Hat Security Advisory: pipewire security update

pipewire: RAOP RTSP NULL Deref pipewire: Pulse Server alloca Stack Overflow

RLSA-2026:61240 — Moderate: pipewire security update

Affected: Rocky Linux:9: pipewire

PipeWire is a multimedia server for Linux and other Unix like operating systems.

Security Fix(es):

* pipewire: RAOP RTSP NULL Deref (CVE-2026-14324)

* pipewire: Pulse Server alloca Stack Overflow (CVE-2026-14330)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2026-14330

Affected: Ubuntu:22.04:LTS: pipewire, Ubuntu:24.04:LTS: pipewire, Ubuntu:25.10: pipewire, Ubuntu:26.04:LTS: pipewire

Multiple unbounded alloca() calls in the PulseAudio protocol server.

WID-SEC-W-2026-3095 — Red Hat Enterprise Linux (pipewire,dbus-broker): Mehrere Schwachstellen ermöglichen Denial of Service

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.