Read the docs

FluidSynth

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

FluidSynth records in CISA KEV

No FluidSynth vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fluidsynth 3 records HIGH

Records

10 records

TI-2025-42135 CVE-2025-68617

Use after free in fluidsynth

Priority HIGH 66

FluidSynth is a software synthesizer based on the SoundFont 2 specifications.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00213 Published 2025-12-23 Fixed in 2.5.2 CWE-416
TI-2026-74907 CVE-2026-111123

Out-of-bounds write in FluidSynth SoundFont modulator handling

Priority MEDIUM 64

FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modulator destination values.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00195 Published 2026-10-15 No fix listed CWE-787
TI-2026-41957 CVE-2026-58264

FluidSynth: Heap-based buffer overrun

Priority MEDIUM 50

FluidSynth is a software synthesizer based on the SoundFont 2 specifications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00586 Published 2026-09-18 Fixed in 2.5.6 CWE-122
TI-2021-04515 CVE-2021-21417

Use after free in fluidsynth

Priority LOW 33

fluidsynth is a software synthesizer based on the SoundFont 2 specifications.

CVSS 3.1HIGH 7.2 Local Low privileges User interaction EPSS 0.00944 Published 2021-04-29 Fixed in 2.1.8 CWE-416
TI-2026-44181 CVE-2026-61723

FluidSynth: DLS ptbl Chunk Integer Overflow

Priority LOW 29

FluidSynth is a software synthesizer based on the SoundFont 2 specifications.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00184 Published 2026-09-18 Fixed in 2.5.6 CWE-190
Open these records in search →