Pulseaudio is a widely deployed audio server middleware that handles low-level sound management across desktop and server Linux environments, and its vulnerability profile centers on concurrency and privilege-boundary issues inherent to a privileged daemon managing shared audio resources. The recurring weakness classes—race conditions, resource-exposure flaws, improper access control, input validation gaps, and symlink-following vulnerabilities—reflect the challenges of coordinating access to audio devices and configuration files across multiple client processes and privilege contexts. Exploit tooling has a track record of availability for this vendor's disclosures; current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Pulseaudio over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-1894HIGH Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LD_BI | Jul 17, 2009 | 7.2 | 32 | NO | YES |
CVE-2007-1804HIGH PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA_PSTREAM_DESCRIPTOR_LENGTH value of FRAME_SIZE_MAX_ALLOW sent on TCP port 9875, whi | Apr 2, 2007 | 7.8 | 32 | NO | YES |
CVE-2008-0008HIGH The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when atte | Jan 29, 2008 | 7.2 | 22 | NO | NO |
CVE-2020-15710MEDIUM Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail conditio | Nov 19, 2020 | 6.1 | 20 | NO | NO |
CVE-2009-1299MEDIUM The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on | Mar 18, 2010 | 6.9 | 18 | NO | NO |
CVE-2024-11586MEDIUM Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected. | Nov 23, 2024 | 4.0 | 13 | NO | NO |
An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restriction for snaps which | May 15, 2020 | 3.3 | 12 | NO | NO |
The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure an | Jun 11, 2014 | 2.9 | 12 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Pulseaudio.
Media articles that mention a CVE ID that affects a product developed by Pulseaudio — matched by CVE ID, not by vendor name.