https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:46:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06708 bdu:2026-06708 https://cve.radiocsirt.org/vuln/bdu:2026-06708 https://cve.radiocsirt.org/vuln/bell-cve-2026-25068 <p><strong>Affected:</strong> Alpaquita:23: alsa-lib, Alpaquita:25: alsa-lib, Alpaquita:stream: alsa-lib</p> <p><strong>Affected:</strong> Alpaquita:23: alsa-lib, Alpaquita:25: alsa-lib, Alpaquita:stream: alsa-lib</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-25068 https://cve.radiocsirt.org/vuln/euvd-2026-321164 EUVD-2026-321164 https://cve.radiocsirt.org/vuln/euvd-2026-321164 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25068 <p>alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.</p> <p>alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-25068 https://cve.radiocsirt.org/vuln/ghsa-x6vq-264g-8wcx <p>alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.</p> <p>alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.</p> https://cve.radiocsirt.org/vuln/ghsa-x6vq-264g-8wcx https://cve.radiocsirt.org/vuln/oesa-2026-1582 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: alsa-lib, openEuler:22.03-LTS-SP4: alsa-lib, openEuler:24.03-LTS: alsa-lib, openEuler:24.03-LTS-SP1: alsa-lib, openEuler:24.03-LTS-SP2: alsa-lib, openEuler:24.03-LTS-SP3: alsa-lib</p> <p>The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib</p> <p>Security Fix(es):</p> <p>alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.(CVE-2026-25068)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: alsa-lib, openEuler:22.03-LTS-SP4: alsa-lib, openEuler:24.03-LTS: alsa-lib, openEuler:24.03-LTS-SP1: alsa-lib, openEuler:24.03-LTS-SP2: alsa-lib, openEuler:24.03-LTS-SP3: alsa-lib</p> <p>The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib</p> <p>Security Fix(es):</p> <p>alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.(CVE-2026-25068)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1582 https://cve.radiocsirt.org/vuln/rhsa-2026:7401 <p>alsa-lib: alsa-lib Topology Decoder Heap-based Buffer Overflow</p> <p>alsa-lib: alsa-lib Topology Decoder Heap-based Buffer Overflow</p> https://cve.radiocsirt.org/vuln/rhsa-2026:7401 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-25068 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: alsa-lib, Ubuntu:22.04:LTS: alsa-lib, Ubuntu:24.04:LTS: alsa-lib, Ubuntu:25.10: alsa-lib, Ubuntu:26.04:LTS: alsa-lib</p> <p>alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: alsa-lib, Ubuntu:22.04:LTS: alsa-lib, Ubuntu:24.04:LTS: alsa-lib, Ubuntu:25.10: alsa-lib, Ubuntu:26.04:LTS: alsa-lib</p> <p>alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-25068