Vulnerabilities

TI-2025-35279 CVE-2025-56225 · GHSA-qgg6-hj2r-3x43

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in…

HIGH 72

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00459 Published 2026-01-09 No fix listed CWE-476

TI-2025-42135 CVE-2025-68617

Use after free in fluidsynth

HIGH 66

FluidSynth is a software synthesizer based on the SoundFont 2 specifications.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00213 Published 2025-12-23 Fixed in 2.5.2 CWE-416

TI-2021-04515 CVE-2021-21417

Use after free in fluidsynth

LOW 33

fluidsynth is a software synthesizer based on the SoundFont 2 specifications.

CVSS 3.1HIGH 7.2 Local Low privileges User interaction EPSS 0.00944 Published 2021-04-29 Fixed in 2.1.8 CWE-416

Vulnerabilities

Filters

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in…

Use after free in fluidsynth

Use after free in fluidsynth