Ze Sheng

**Name of the Vulnerable Software and Affected Versions** ALSA library versions prior to 1.2.16.1 **Description** A double-free issue exists in the `parse def()` function within `src/conf.c`. This occurs when the system parses nested compound or array configuration blocks and fails to check return values before proceeding. Consequently, the `snd config delete()` function is called twice on the same already-freed node, which can lead to memory corruption, a NULL-pointer write, or an invalid memory read if an attacker provides maliciously crafted ALSA configuration text. **Recommendations** Update ALSA library to version 1.2.16.1.

**Name of the Vulnerable Software and Affected Versions** Ghidra versions prior to 12.0.3 **Description** An out-of-memory issue exists in the `rust demangle()` function, which allocates unbounded output buffers without size limits. This allows attackers to craft malicious Rust symbol names within binaries to trigger exponential memory allocation, leading to process crashes during binary analysis. **Recommendations** Update to version 12.0.3 or later.