Описание
Multiple unbounded alloca() calls in the PulseAudio protocol server.
Меры по смягчению последствий
No practical mitigation beyond upgrading. The PulseAudio protocol server is a core module required for PulseAudio application compatibility.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | libkrun | Not affected | ||
| Red Hat Enterprise Linux 10 | pipewire | Affected | ||
| Red Hat Enterprise Linux 8 | pipewire | Affected | ||
| Red Hat Enterprise Linux 8 | pipewire0.2 | Affected | ||
| Red Hat Enterprise Linux 9 | pipewire | Fixed | RHSA-2026:61240 | 31.08.2026 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-770
https://bugzilla.redhat.com/show_bug.cgi?id=2495907pipewire: Pulse Server alloca Stack Overflow
5.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.5
ubuntu
3 месяца назад
Multiple unbounded alloca() calls in the PulseAudio protocol server.
CVSS3: 5.5
nvd
3 месяца назад
Multiple unbounded alloca() calls in the PulseAudio protocol server.
CVSS3: 5.5
debian
3 месяца назад
Multiple unbounded alloca() calls in the PulseAudio protocol server.
CVSS3: 5.5
github
3 месяца назад
Multiple unbounded alloca() calls in the PulseAudio protocol server.
5.5 Medium
CVSS3