a
alsa
Security Risk Profile
29
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 5, 2009 to present
9
Total CVEs
1
Critical+High
1
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
4.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
29/100
low
⚠️ 1 Active Exploits⚡ 1 Zero-Days🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
1Medium
6Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Integer Overflow
1
2
Double Free
1
3
Null Pointer Dereference
1
4
Out-of-bounds Read
1
5
Buffer Overflow
1
Most Affected Products
1. Linux Linux kernel15
2. Google Android4
3. ALSA alsa-lib3
4. Linux Kernel3
5. debian/alsa-lib2
Recent Vulnerabilities
See more →CVE-2026-96674
CVSS 4.8EPSS 0%medium
alsa-lib through 1.2.16.1 Integer Overflow via Topology File
Sep 23, 2026🔧 No Patch
CVE-2026-56109
CVSS 7.0high
ALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.c
Jun 22, 2026
CVE-2026-43436
CVSS 5.5medium
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
May 8, 2026
CVE-2026-25068
CVSS 4.6EPSS 0%medium
alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow
Jan 29, 2026
https://www.bleepingcomputer.com/news/security/google-fixes-android-zero-days-exploited-in-targeted-attacks/
unknown
Google fixes Android zero-day exploited by Serbian authorities
Mar 4, 2025⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2021-47096
CVSS 4.0medium
ALSA: rawmidi - fix the uninitalized user_pversion
Mar 4, 2024
REDHAT-BUG-1550142
CVSS 4.0medium
Feb 28, 2018🔧 No Patch
REDHAT-BUG-1501878
CVSS 4.0medium
Oct 13, 2017🔧 No Patch
REDHAT-BUG-484211
CVSS 1.0low
Feb 5, 2009🔧 No Patch
Monitor alsa in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.