medium5.5
CVE-2026-14330
Multiple unbounded alloca() calls in the PulseAudio protocol server.
Impact
Multiple unbounded alloca() calls in the PulseAudio protocol server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | All versions Version patch: 0:1.4.11-1.el10_2.2 |
| Red Hat | Red Hat Enterprise Linux 9 | All versions Version patch: 0:1.4.11-1.el9_8.2 |
| Red Hat | Red Hat Enterprise Linux 8 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://access.redhat.com/errata/RHSA-2026:61240
- https://access.redhat.com/security/cve/CVE-2026-14330
- https://bugzilla.redhat.com/show_bug.cgi?id=2495907
- https://access.redhat.com/errata/RHSA-2026:93442
- https://github.com/advisories/GHSA-26rf-3h26-fc3w
- https://nvd.nist.gov/vuln/detail/CVE-2026-14330