CVE-2026-31619 ALSA: fireworks: bound device-supplied status before string array lookup

Information published.