Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-96675 →

DEBIAN-CVE-2026-96675

alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before arra...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failure, causing the application to abort.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 alsa-lib

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 alsa-lib

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 alsa-lib

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org