CVE-2026-14330 PUBLISHED

Pipewire: pulse server alloca stack overflow

Assigner: redhat
Reserved: 01.07.2026 Published: 01.07.2026 Updated: 01.07.2026

Multiple unbounded alloca() calls in the PulseAudio protocol server.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 5.5

Attack Vector	Local	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	Low	Integrity Impact	None
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Red Hat
Product	Red Hat Enterprise Linux 10
Versions	Default: unknown

Vendor	Red Hat
Product	Red Hat Enterprise Linux 10
Versions	Default: unknown

Vendor	Red Hat
Product	Red Hat Enterprise Linux 8
Versions	Default: unknown

Vendor	Red Hat
Product	Red Hat Enterprise Linux 8
Versions	Default: unknown

Vendor	Red Hat
Product	Red Hat Enterprise Linux 9
Versions	Default: unknown

Workarounds

No practical mitigation beyond upgrading. The PulseAudio protocol server is a core module required for PulseAudio application compatibility.

Credits

Red Hat would like to thank Tristan for reporting this issue.

References

Problem Types

Allocation of Resources Without Limits or Throttling CWE