ALSA Project has 1 CVE on record. 1 was published in the last 90 days. The median CVSS is 4.4 (medium).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 4.4
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

Products

alsa-lib 1

Follow ALSA Project:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

CVE-2026-90781Medium· 4.4alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters36

ALSA Project vulnerabilities

CVEs affecting ALSA Project, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-90781Medium· 4.4PoC

1w ago

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long cont…

▾ TwilightALSA Project · alsa-libEPSS 0.18%via NVD