CVE-2014-9904

The snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.17 does not properly check for an integer overflow, which allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call.

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6217e5ede23285ddfee10d2e4ba0cc2d4c046205Patch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3616Third Party Advisory
• http://www.securityfocus.com/bid/91510Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036189Third Party Advisory, VDB Entry
• https://github.com/torvalds/linux/commit/6217e5ede23285ddfee10d2e4ba0cc2d4c046205Patch, Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6217e5ede23285ddfee10d2e4ba0cc2d4c046205Patch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3616Third Party Advisory
• http://www.securityfocus.com/bid/91510Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036189Third Party Advisory, VDB Entry
• https://github.com/torvalds/linux/commit/6217e5ede23285ddfee10d2e4ba0cc2d4c046205Patch, Vendor Advisory

Published

Jun 27, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9898arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm c…
• CVE-2014-9899drivers/usb/host/ehci-msm2.c in the Qualcomm components in A…
• CVE-2014-9900The ethtool_get_wol function in net/core/ethtool.c in the Li…
• CVE-2014-9901The Qualcomm Wi-Fi driver in Android before 2016-08-05 on Ne…
• CVE-2014-9902Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in…
• CVE-2014-9903The sched_read_attr function in kernel/sched/core.c in the L…
• CVE-2014-9905Multiple cross-site scripting (XSS) vulnerabilities in the W…6.1
• CVE-2014-9906Use-after-free vulnerability in DBD::mysql before 4.029 allo…
• CVE-2014-9907coders/dds.c in ImageMagick allows remote attackers to cause…6.5
• CVE-2014-9908A Denial of Service vulnerability exists in Google Android 4…6.5
• CVE-2014-9909An elevation of privilege vulnerability in the Broadcom Wi-F…
• CVE-2014-9910An elevation of privilege vulnerability in the Broadcom Wi-F…