RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pipewire-utilsUpgrade pipewire-pulseaudioUpgrade pipewire-gstreamerUpgrade pipewire-develUpgrade pipewire-alsaUpgrade pipewire-module-x11Upgrade pipewireUpgrade pipewire-jack-audio-connection-kitUpgrade pipewire-libsUpgrade pipewire-jack-audio-connection-kit-libsUpgrade pipewire-jack-audio-connection-kit-devel | Oct 11, 2026 | Aug 31, 2026 |
| Amazon_linux_2023 | — | Upgrade pipewire-alsaUpgrade pipewire-jack-audio-connection-kitUpgrade pipewire-module-x11Upgrade pipewire-jack-audio-connection-kit-libsUpgrade pipewire-config-ratesUpgrade pipewire-pulseaudioUpgrade pipewire-config-upmixUpgrade pipewire-v4l2-debuginfoUpgrade pipewire-pulseaudio-debuginfoUpgrade pipewire-alsa-debuginfoUpgrade pipewire-utilsUpgrade pipewire-gstreamer-debuginfoUpgrade pipewire-jack-audio-connection-kit-develUpgrade pipewire-utils-debuginfoUpgrade pipewire-libs-debuginfoUpgrade pipewire-jack-audio-connection-kit-libs-debuginfoUpgrade pipewire-debugsourceUpgrade pipewire-v4l2Upgrade pipewire-debuginfoUpgrade pipewire-docUpgrade pipewire-libsUpgrade pipewire-module-x11-debuginfoUpgrade pipewireUpgrade pipewire-develUpgrade pipewire-plugin-vulkan-debuginfoUpgrade pipewire-plugin-vulkanUpgrade pipewire-gstreamer | Aug 10, 2026 | Jul 1, 2026 |
| Oracle_linux | — | Upgrade pipewire-utilsUpgrade pipewire-gstreamerUpgrade pipewireUpgrade pipewire-develUpgrade pipewire-jack-audio-connection-kit-libsUpgrade pipewire-module-x11Upgrade pipewire-libsUpgrade pipewire-pulseaudioUpgrade pipewire-jack-audio-connection-kit-develUpgrade pipewire-jack-audio-connection-kitUpgrade pipewire-alsaUpgrade pipewire-plugin-libcamera | Oct 22, 2026 | Jul 1, 2026 |
| Redhat_linux | — | Upgrade pipewire-libs-debuginfoUpgrade pipewire-gstreamerUpgrade pipewire-plugin-libcamera-debuginfoUpgrade pipewire-utils-debuginfoUpgrade pipewire-pulseaudio-debuginfoUpgrade pipewire-plugin-libcameraUpgrade pipewire-debuginfoUpgrade pipewire-develUpgrade pipewire-utilsUpgrade pipewire-module-x11-debuginfoUpgrade pipewire-plugin-vulkan-debuginfoUpgrade pipewireUpgrade pipewire-pulseaudioUpgrade pipewire-jack-audio-connection-kit-libsUpgrade pipewire-v4l2-debuginfoUpgrade pipewire-alsaUpgrade pipewire-gstreamer-debuginfoNo solution existsUpgrade pipewire-libsUpgrade pipewire-jack-audio-connection-kit-libs-debuginfoUpgrade pipewire-alsa-debuginfoUpgrade pipewire-jack-audio-connection-kit-develUpgrade pipewire-module-x11Upgrade pipewire-jack-audio-connection-kitUpgrade pipewire-debugsource | Aug 28, 2026 | Jul 1, 2026 |
| Rocky_linux | — | Upgrade pipewire-jack-audio-connection-kit-develUpgrade pipewire-jack-audio-connection-kit-libsUpgrade pipewire-gstreamerUpgrade pipewire-alsa-debuginfoUpgrade pipewire-alsaUpgrade pipewire-debugsourceUpgrade pipewire-pulseaudioUpgrade pipewire-module-x11Upgrade pipewire-gstreamer-debuginfoUpgrade pipewire-libsUpgrade pipewireUpgrade pipewire-libs-debuginfoUpgrade pipewire-debuginfoUpgrade pipewire-pulseaudio-debuginfoUpgrade pipewire-utilsUpgrade pipewire-jack-audio-connection-kit-libs-debuginfoUpgrade pipewire-develUpgrade pipewire-utils-debuginfoUpgrade pipewire-module-x11-debuginfoUpgrade pipewire-jack-audio-connection-kit | Sep 2, 2026 | Aug 31, 2026 |
| Ubuntu | — | Upgrade libpipewire-0.3-modules-extraUpgrade libspa-0.2-modules-extraUpgrade pipewire-pulseUpgrade pipewire-binUpgrade libpipewire-0.3-modules-x11Upgrade libpipewire-0.3-modulesUpgrade pipewireUpgrade libspa-0.2-modules | Jul 14, 2026 | Jul 13, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub