https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T09:18:23.185143+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bdu:2026-14612 bdu:2026-14612 2026-09-28T09:18:23.211115+00:00 bdu:2026-14612 https://db.gcve.eu/vuln/fkie_cve-2026-90781 fkie_cve-2026-90781 2026-09-28T09:18:23.211161+00:00

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.

 https://db.gcve.eu/vuln/ghsa-f8w2-9vv9-pxwq GHSA-f8w2-9vv9-pxwq 2026-09-28T09:18:23.211197+00:00

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.

 https://db.gcve.eu/vuln/oesa-2026-4119 OESA-2026-4119 — alsa-lib security update 2026-09-28T09:18:23.211215+00:00

Affected: openEuler:24.03-LTS-SP4: alsa-lib, openEuler:20.03-LTS-SP4: alsa-lib, openEuler:22.03-LTS-SP4: alsa-lib, openEuler:24.03-LTS-SP1: alsa-lib, openEuler:24.03-LTS-SP3: alsa-lib

The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fix(es):

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.(CVE-2026-90781)

 https://db.gcve.eu/vuln/opensuse-su-2026:11783-1 openSUSE-SU-2026:11783-1 — alsa-1.2.16.1-2.1 on GA media 2026-09-28T09:18:23.211250+00:00

alsa-1.2.16.1-2.1 on GA media

 https://db.gcve.eu/vuln/rhsa-2026:40573 RHSA-2026:40573 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-09-28T09:18:23.211269+00:00

alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption alsa-lib: alsa-lib: Denial of Service via off-by-one stack buffer overflow

 https://db.gcve.eu/vuln/ubuntu-cve-2026-90781 UBUNTU-CVE-2026-90781 2026-09-28T09:18:23.211286+00:00

Affected: Ubuntu:14.04:LTS: alsa-lib, Ubuntu:16.04:LTS: alsa-lib, Ubuntu:18.04:LTS: alsa-lib, Ubuntu:Pro:20.04:LTS: alsa-lib, Ubuntu:22.04:LTS: alsa-lib, Ubuntu:24.04:LTS: alsa-lib, Ubuntu:26.04:LTS: alsa-lib

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.