Summary
[1.4.11-1.2]
- CVE-2026-14330 pipewire: Pulse Server alloca Stack Overflow
Resolves: RHEL-296741
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | pipewire | 0:1.4.11-1.el10_2.2 |
| Oracle Linux · 10 | pipewire-alsa | 0:1.4.11-1.el10_2.2 |
| Oracle Linux · 10 | pipewire-devel | 0:1.4.11-1.el10_2.2 |
| Oracle Linux · 10 | pipewire-gstreamer | 0:1.4.11-1.el10_2.2 |
| Oracle Linux · 10 | pipewire-jack-audio-connection-kit | 0:1.4.11-1.el10_2.2 |
| Oracle Linux · 10 | pipewire-jack-audio-connection-kit-devel | 0:1.4.11-1.el10_2.2 |
| Oracle Linux · 10 | pipewire-jack-audio-connection-kit-libs | 0:1.4.11-1.el10_2.2 |
| Oracle Linux · 10 | pipewire-libs | 0:1.4.11-1.el10_2.2 |
| Oracle Linux · 10 | pipewire-module-x11 | 0:1.4.11-1.el10_2.2 |
| Oracle Linux · 10 | pipewire-plugin-libcamera | 0:1.4.11-1.el10_2.2 |
| Oracle Linux · 10 | pipewire-pulseaudio | 0:1.4.11-1.el10_2.2 |
| Oracle Linux · 10 | pipewire-utils | 0:1.4.11-1.el10_2.2 |
Vulnerabilities 1
-
Medium 5.5
Pipewire: pulse server alloca stack overflow
Multiple unbounded alloca() calls in the PulseAudio protocol server.