Most recent entries from all

fkie_cve-2026-61720

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modulator count as chunk.size / SF_MOD_SIZE - 1 without rejecting chunks smaller than one record. A crafted SF2 file containing a zero-sized DMOD chunk makes the unsigned subtraction wrap to UINT_MAX, and the parser then attempts billions of SFMod allocations. This exhausts process memory and causes denial of service. No workaround is available. This issue is fixed in version 2.5.6.

OESA-2026-3167 — fluidsynth security update

Affected: openEuler:24.03-LTS-SP4: fluidsynth

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use FluidSynth for audio synthesis. Security Fix(es):

A heap-based buffer overflow was discovered in fluidsynth's MIDI player. When the synth is configured with `synth.midi-channels > 16` an out-of-bounds memory access is performed on the array `_fluid_player_t::channel_isplaying` in heap memory invoking undefined behavior. No crafted MIDI file is required to expose this vulnerability.(CVE-2026-61714)

An unsigned integer overflow in fluidsynth's SF2 parser was discovered. The DMOD chunk handler calculates modulator count as `chunk.size / SF_MOD_SIZE - 1`. When `chunk.size = 0`, the division yields 0 and the unsigned subtraction wraps to `UINT_MAX` (4,294,967,295). The guard check passes because `0 % 10 == 0`. The loop iterates billions of times, allocating an `SFMod` struct per iteration until causing a denial of service via out-of-memory.(CVE-2026-61720)

Fluidsynth's native DLS loader sets sample loop points from file-sourced `wsmp.loop_start` and `wsmp.loop_length` values without calling `fluid_sample_validate()` or `fluid_sample_sanitize_loop()`. Crafted DLS files with loop values exceeding the sample buffer cause out-of-bounds reads during audio rendering, invoking…

UBUNTU-CVE-2026-61720

Affected: Ubuntu:14.04:LTS: fluidsynth, Ubuntu:16.04:LTS: fluidsynth, Ubuntu:18.04:LTS: fluidsynth, Ubuntu:20.04:LTS: fluidsynth, Ubuntu:22.04:LTS: fluidsynth, Ubuntu:24.04:LTS: fluidsynth, Ubuntu:26.04:LTS: fluidsynth