CVE-2026-25068: alsa-lib 1.2.15.2 Topology Decoder Heap-based Buffer Overflow
alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplgdecodecontrolmixer1() function reads the numchannels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SNDTPLGMAXCHAN). A crafted topology file with an excessive numchannels value can cause out-of-bounds heap writes, leading to a crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25068?
CVE-2026-25068 has been classified with a critical severity level due to the potential for remote code execution.
What is the impact of CVE-2026-25068?
CVE-2026-25068 can lead to a heap-based buffer overflow, allowing an attacker to execute arbitrary code on affected systems.
How do I fix CVE-2026-25068?
To address CVE-2026-25068, upgrade to alsa-lib version 1.2.15.3 or later, which includes a fix for the vulnerability.
Which versions of alsa-lib are affected by CVE-2026-25068?
CVE-2026-25068 affects alsa-lib versions from 1.2.2 up to and including 1.2.15.2.
How can I mitigate risks associated with CVE-2026-25068?
Mitigation for CVE-2026-25068 includes applying the latest updates and ensuring proper security measures are in place to limit exposure.