https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 09:18:24 +0000 https://db.gcve.eu/vuln/bdu:2026-14612 bdu:2026-14612 https://db.gcve.eu/vuln/bdu:2026-14612 https://db.gcve.eu/vuln/fkie_cve-2026-90781 <p>alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.</p> <p>alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.</p> https://db.gcve.eu/vuln/fkie_cve-2026-90781 https://db.gcve.eu/vuln/ghsa-f8w2-9vv9-pxwq <p>alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.</p> <p>alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.</p> https://db.gcve.eu/vuln/ghsa-f8w2-9vv9-pxwq https://db.gcve.eu/vuln/oesa-2026-4119 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: alsa-lib, openEuler:20.03-LTS-SP4: alsa-lib, openEuler:22.03-LTS-SP4: alsa-lib, openEuler:24.03-LTS-SP1: alsa-lib, openEuler:24.03-LTS-SP3: alsa-lib</p> <p>The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fix(es):</p> <p>alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.(CVE-2026-90781)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: alsa-lib, openEuler:20.03-LTS-SP4: alsa-lib, openEuler:22.03-LTS-SP4: alsa-lib, openEuler:24.03-LTS-SP1: alsa-lib, openEuler:24.03-LTS-SP3: alsa-lib</p> <p>The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib Security Fix(es):</p> <p>alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.(CVE-2026-90781)</p> https://db.gcve.eu/vuln/oesa-2026-4119 https://db.gcve.eu/vuln/opensuse-su-2026:11783-1 <p>alsa-1.2.16.1-2.1 on GA media</p> <p>alsa-1.2.16.1-2.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:11783-1 https://db.gcve.eu/vuln/rhsa-2026:40573 <p>alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption alsa-lib: alsa-lib: Denial of Service via off-by-one stack buffer overflow</p> <p>alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption alsa-lib: alsa-lib: Denial of Service via off-by-one stack buffer overflow</p> https://db.gcve.eu/vuln/rhsa-2026:40573 https://db.gcve.eu/vuln/ubuntu-cve-2026-90781 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: alsa-lib, Ubuntu:16.04:LTS: alsa-lib, Ubuntu:18.04:LTS: alsa-lib, Ubuntu:Pro:20.04:LTS: alsa-lib, Ubuntu:22.04:LTS: alsa-lib, Ubuntu:24.04:LTS: alsa-lib, Ubuntu:26.04:LTS: alsa-lib</p> <p>alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: alsa-lib, Ubuntu:16.04:LTS: alsa-lib, Ubuntu:18.04:LTS: alsa-lib, Ubuntu:Pro:20.04:LTS: alsa-lib, Ubuntu:22.04:LTS: alsa-lib, Ubuntu:24.04:LTS: alsa-lib, Ubuntu:26.04:LTS: alsa-lib</p> <p>alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-90781