alsa
Security Risk Profile
37
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 5, 2009 to present
8
Total CVEs
1
Critical+High
1
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
4.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
37/100
low
⚠️ 1 Active Exploits⚡ 1 Zero-Days
Severity Distribution
Critical
0High
1Medium
5Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Double Free
1
2
Null Pointer Dereference
1
3
Out-of-bounds Read
1
4
Buffer Overflow
1
5
Use After Free
1
Most Affected Products
1. Linux Linux kernel15
2. Google Android4
3. Linux Kernel3
4. debian/alsa-lib2
5. ALSA alsa-lib2
Recent Vulnerabilities
See more →CVE-2026-56109
CVSS 7.0high
ALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.c
6/22/2026
CVE-2026-43436
CVSS 5.5medium
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
5/8/2026
CVE-2026-25068
CVSS 4.6EPSS 0%medium
alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow
1/29/2026
https://www.bleepingcomputer.com/news/security/google-fixes-android-zero-days-exploited-in-targeted-attacks/
unknown
Google fixes Android zero-day exploited by Serbian authorities
3/4/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2021-47096
CVSS 4.0medium
ALSA: rawmidi - fix the uninitalized user_pversion
3/4/2024
REDHAT-BUG-1550142
CVSS 4.0medium
2/28/2018🔧 No Patch
REDHAT-BUG-1501878
CVSS 4.0medium
10/13/2017🔧 No Patch
REDHAT-BUG-484211
CVSS 1.0low
2/5/2009🔧 No Patch
Monitor alsa in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.