Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: FluidSynth Clear all filters
TI-2026-74907 CVE-2026-111123

Out-of-bounds write in FluidSynth SoundFont modulator handling

Priority MEDIUM 64

FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modulator destination values.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00195 Published 2026-10-15 No fix listed CWE-787
TI-2026-44181 CVE-2026-61723

FluidSynth: DLS ptbl Chunk Integer Overflow

Priority LOW 29

FluidSynth is a software synthesizer based on the SoundFont 2 specifications.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00184 Published 2026-09-18 Fixed in 2.5.6 CWE-190
TI-2026-41957 CVE-2026-58264

FluidSynth: Heap-based buffer overrun

Priority MEDIUM 50

FluidSynth is a software synthesizer based on the SoundFont 2 specifications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00586 Published 2026-09-18 Fixed in 2.5.6 CWE-122
TI-2025-42135 CVE-2025-68617

Use after free in fluidsynth

Priority HIGH 66

FluidSynth is a software synthesizer based on the SoundFont 2 specifications.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00213 Published 2025-12-23 Fixed in 2.5.2 CWE-416
TI-2021-04515 CVE-2021-21417

Use after free in fluidsynth

Priority LOW 33

fluidsynth is a software synthesizer based on the SoundFont 2 specifications.

CVSS 3.1HIGH 7.2 Local Low privileges User interaction EPSS 0.00944 Published 2021-04-29 Fixed in 2.1.8 CWE-416