CVE-2026-96674 | BDVDB-2026-378463 Detail
ALSA Projectalsa-lib
Description#
alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer and potentially leak sensitive data or crash the application.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact low. Attack vector: local.
Weaknesses#
- CWE-190 Integer Overflow or Wraparound
References#
- https://github.com/alsa-project/alsa-lib/pull/527
- https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1316-L1326
- https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1420-L1430
- https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1511-L1521
- https://github.com/alsa-project/alsa-lib
- https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-integer-overflow-via-topology-file
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.