Threats Tagged 'cve-2026-25068'
View all threats tagged with 'cve-2026-25068'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-25068'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-25068: CWE-129 Improper Validation of Array Index in ALSA Project alsa-libCVE-2026-25068 0 alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash. Join the discussion | CVE Database V5 | 01/29/2026, 19:08:03 UTC Added: 01/29/2026, 19:27:48 UTC |
Showing 1 to 1 of 1 result