Skip to content
OpenAdvisories

Package · Wolfi

alsa-lib

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-96674

    alsa-lib through 1.2.16.1 Integer Overflow via Topology File

    alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder…

    alsa-project alsa-lib alsa-lib alsa-lib Debian Ubuntu Azure Linux Wolfi
  • Medium 4.4
    CVE-2026-90781 Public exploit

    alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

    alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier…

    alsa-project alsa-lib alsa-lib alsa-lib Debian Ubuntu Azure Linux Wolfi