CVE-2026-96674
alsa-lib through 1.2.16.1 Integer Overflow via Topology File
CVSS Score
4.4
EPSS Score
0.0%
EPSS Percentile
0th
alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer and potentially leak sensitive data or crash the application.
| CWE | CWE-190 |
| Vendor | alsa project |
| Product | alsa-lib |
| Published | Sep 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for alsa project alsa-lib
Be the first to know when new medium vulnerabilities affecting alsa project alsa-lib are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
Low
Affected Versions
ALSA Project / alsa-lib
0 ≤ 1.2.16.1
References
github.com: https://github.com/alsa-project/alsa-lib/pull/527 github.com: https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1316-L1326 github.com: https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1420-L1430 github.com: https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1511-L1521 github.com: https://github.com/alsa-project/alsa-lib vulncheck.com: https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-integer-overflow-via-topology-file
Credits
Harsh Raj Singhania