Is CVE-2026-96675 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-96675?

CVE-2026-96675 has a CVSS v3 severity of LOW (3.3).

Back

CVE-2026-96675

Description

alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failure, causing the application to abort.