https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:24:50 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-56109 <p><strong>Affected:</strong> Alpaquita:23: alsa-lib, Alpaquita:25: alsa-lib, Alpaquita:stream: alsa-lib</p> <p><strong>Affected:</strong> Alpaquita:23: alsa-lib, Alpaquita:25: alsa-lib, Alpaquita:stream: alsa-lib</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-56109 https://cve.radiocsirt.org/vuln/euvd-2026-336912 EUVD-2026-336912 https://cve.radiocsirt.org/vuln/euvd-2026-336912 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56109 <p>The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.</p> <p>The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56109 https://cve.radiocsirt.org/vuln/ghsa-jfrh-w252-q2h4 <p>The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.</p> <p>The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.</p> https://cve.radiocsirt.org/vuln/ghsa-jfrh-w252-q2h4 https://cve.radiocsirt.org/vuln/oesa-2026-2847 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: alsa-lib</p> <p>The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fix(es):</p> <p>The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.(CVE-2026-56109)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: alsa-lib</p> <p>The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fix(es):</p> <p>The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.(CVE-2026-56109)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2847 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21075-1 <p>Security update for alsa</p> <p>Security update for alsa</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:21075-1 https://cve.radiocsirt.org/vuln/rhsa-2026:40573 <p>alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption alsa-lib: alsa-lib: Denial of Service via off-by-one stack buffer overflow</p> <p>alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption alsa-lib: alsa-lib: Denial of Service via off-by-one stack buffer overflow</p> https://cve.radiocsirt.org/vuln/rhsa-2026:40573 https://cve.radiocsirt.org/vuln/suse-su-2026:22291-1 <p>Security update for alsa</p> <p>Security update for alsa</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22291-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56109 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: alsa-lib, Ubuntu:16.04:LTS: alsa-lib, Ubuntu:18.04:LTS: alsa-lib, Ubuntu:Pro:20.04:LTS: alsa-lib, Ubuntu:22.04:LTS: alsa-lib, Ubuntu:24.04:LTS: alsa-lib, Ubuntu:25.10: alsa-lib, Ubuntu:26.04:LTS: alsa-lib</p> <p>The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: alsa-lib, Ubuntu:16.04:LTS: alsa-lib, Ubuntu:18.04:LTS: alsa-lib, Ubuntu:Pro:20.04:LTS: alsa-lib, Ubuntu:22.04:LTS: alsa-lib, Ubuntu:24.04:LTS: alsa-lib, Ubuntu:25.10: alsa-lib, Ubuntu:26.04:LTS: alsa-lib</p> <p>The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56109