Threats tagged 'oesa-2026-4119'

CVE-2026-90781 is a medium severity vulnerability in alsa-lib, a library interfacing with ALSA in the Linux kernel. It involves a stack buffer overflow caused by an off-by-one error in the __snd_ctl_ascii_elem_id_parse() function when parsing a name= field with 64 or more characters. This overflow allows overwriting one byte past a 64-byte buffer, potentially crashing the calling process. The flaw affects alsa-lib versions up to and including 1.2.16.1.