CVE-2026-25068

Name of the Vulnerable Software and Affected Versions alsa-lib versions 1.2.2 through 1.2.15.2

Description alsa-lib contains a heap-based buffer overflow in the topology mixer control decoder. The tplg decode control mixer1() function reads the num channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array SND TPLG MAX CHAN. A crafted topology file with an excessive num channels value can cause out-of-bounds heap writes, leading to a crash.

Recommendations Update to a version of alsa-lib after commit 5f7fe33.