Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.6
openeuler ALSA-lib can crash from long input
published 1 month ago
Summary
The ALSA-lib library used in openEuler systems may write beyond its internal buffer when it processes a control name that is 64 characters or longer. This can cause the program using the library to stop working unexpectedly. Update the library to the latest version to prevent crashes caused by crafted input.
What to do
- Update openeuler alsa-lib to version 1.2.10-6.oe2403sp4.
- Update openeuler alsa-lib to version 1.2.3-4.oe2003sp4.
- Update openeuler alsa-lib to version 1.2.5.1-6.oe2203sp4.
- Update openeuler alsa-lib to version 1.2.10-6.oe2403sp1.
- Update openeuler alsa-lib to version 1.2.10-6.oe2403sp3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| openEuler:24.03-LTS-SP4 | openeuler | alsa-lib |
< 1.2.10-6.oe2403sp4 Fix: upgrade to 1.2.10-6.oe2403sp4
|
| openEuler:20.03-LTS-SP4 | openeuler | alsa-lib |
< 1.2.3-4.oe2003sp4 Fix: upgrade to 1.2.3-4.oe2003sp4
|
| openEuler:22.03-LTS-SP4 | openeuler | alsa-lib |
< 1.2.5.1-6.oe2203sp4 Fix: upgrade to 1.2.5.1-6.oe2203sp4
|
| openEuler:24.03-LTS-SP1 | openeuler | alsa-lib |
< 1.2.10-6.oe2403sp1 Fix: upgrade to 1.2.10-6.oe2403sp1
|
| openEuler:24.03-LTS-SP3 | openeuler | alsa-lib |
< 1.2.10-6.oe2403sp3 Fix: upgrade to 1.2.10-6.oe2403sp3
|
Original advisory text
alsa-lib security update
The alsa-lib is a library to interface with ALSA in the Linux kernel and virtual devices using a plugin system. More detail: https://alsa.opensrc.org/Alsa-lib
Security Fix(es):
alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.(CVE-2026-90781)
Security Fix(es):
alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.(CVE-2026-90781)
References
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-90781 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published25 Sep 2026
Updated30 Sep 2026
First seen30 Sep 2026
Sources
OESA-2026-4119 · OSV
Track software like this
Free during beta