The ALSA Project's alsa-lib library through version 1.2.16.1 contains an integer overflow vulnerability in src/topology/ctl.c. The vulnerability arises because the combined topology element size is computed using 32-bit arithmetic without proper overflow checks, allowing an attacker to supply specially crafted topology files that cause the size calculation to wrap around. This bypasses bounds checking and results in the decoder reading beyond the allocated topology buffer. The consequences include potential sensitive data leakage or application crashes.

An attacker who can supply crafted topology files can exploit this integer overflow to cause out-of-bounds reads, which may lead to sensitive information disclosure or denial of service via application crash. The vulnerability requires local access (AV:L) and user interaction (UI:P), with low complexity and no privileges required. The overall impact is rated medium.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted or crafted topology files with vulnerable versions of alsa-lib.