CVE-2026-96675mediumCWE-129

CVE-2026-96675: falha de média gravidade em alsa-lib

alsa-lib through 1.2.16.1 Denial of Service via pcm_multi

Publicada em

Seguir esta CVE+ Monitorar alsa-lib+ Monitorar alsa-lib

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.8epss 0.1%
alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failure, causing the application to abort.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Produtos afetados
ALSA Project · alsa-lib
CVEs relacionadas — alsa-lib

No mesmo produto, das mais perigosas para as menos.

CVE-2026-25068MEDIUMalsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer OverflowEPSS 0.2%CVE-2026-90781MEDIUMalsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()EPSS 0.2%CVE-2026-96674MEDIUMalsa-lib through 1.2.16.1 Integer Overflow via Topology FileEPSS 0.1%