CVE-2026-64483

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ALSA firewire isight component where the isight packet() function fails to properly validate the frame count from a device iso packet. The function checks the count variable only against the device claimed iso length, which can be up to 0xffff, allowing a count of approximately 16379. Because payload->samples only holds 2 * MAX FRAMES PER PACKET values, a count exceeding MAX FRAMES PER PACKET can lead to an out-of-bounds read from the payload and an out-of-bounds write to the runtime->dma area when isight samples() copies frames into the PCM DMA buffer. This can be triggered by a malicious or faulty Apple iSight device on the FireWire bus during a normal capture.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.