Heap-based buffer overflow in alsa-lib - CVE-2026-25068

Vulnerability identifier: #VU122992

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-25068

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a boundary error within the tplg_decode_control_mixer1() function in src/topology/ctl.c. A remote attacker can pass specially crafted .tplg data to the application, trigger a heap-based buffer overflow and perform a denial of service attack.

alsa-lib
openEuler
Ubuntu
Anolis OS
alsa-lib (Ubuntu package)
alsa-lib
alsa-lib-debuginfo
alsa-lib-debugsource
alsa-lib-devel
alsa-topology
alsa-ucm
alsa-lib-doc

Install updates from vendor's website.

alsa-lib (Ubuntu package) - addressed in versions 1.2.2-2.1ubuntu2.5+esm1, 1.2.6.1-1ubuntu1.1, 1.2.11-1ubuntu0.2, 1.2.14-1ubuntu1.1
alsa-lib - update to 1.2.3-2
alsa-lib-debuginfo - update to 1.2.3-2
alsa-lib-debugsource - update to 1.2.3-2
alsa-lib-devel - update to 1.2.3-2
alsa-topology - update to 1.2.3-2
alsa-ucm - update to 1.2.3-2
alsa-lib - update to 1.2.9-2
alsa-lib-devel - update to 1.2.9-2
alsa-lib-doc - update to 1.2.9-2
alsa-topology - update to 1.2.9-2
alsa-ucm - update to 1.2.9-2

• https://github.com/alsa-project/alsa-lib/commit/5f7fe33002d2d98d84f72e381ec2cccc0d5d3d40
• https://www.vulncheck.com/advisories/alsa-lib-topology-decoder-heap-based-buffer-overflow

• Denial of service in alsa-lib
• Ubuntu update for alsa-lib
• Anolis OS update for alsa-lib
• openEuler update for alsa-lib
• Ubuntu update for alsa-lib