[ Vendor · 2 CVEs ]

ALSA Project

CVEs affecting ALSA Project published in the last 30 days, plus any ALSA Project CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-96674 23 Sep 2026 CVSS 4.4 ALSA Project alsa-libalsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that…
CVE-2026-96675 23 Sep 2026 CVSS 3.3 ALSA Project alsa-libalsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before…