https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T16:59:08.414946+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-56109 CVE-2026-56109 — ALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.c 2026-09-28T16:59:08.428246+00:00

Affected: alsa-project alsa-lib

The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.

 https://db.gcve.eu/vuln/usn-8538-1 USN-8538-1 — alsa-lib vulnerability 2026-09-28T16:59:08.428316+00:00

Affected: Ubuntu:22.04:LTS: alsa-lib, Ubuntu:24.04:LTS: alsa-lib, Ubuntu:26.04:LTS: alsa-lib

It was discovered that alsa-lib incorrectly handled certain ALSA configuration text. An attacker could use this issue to cause alsa-lib to crash, resulting in a denial of service, or possibly execute arbitrary code.