Fluidsynth

9 CVEs across 1 Fluidsynth products. Browse Fluidsynth vulnerabilities, severities, and proof-of-concept exploits.

Fluidsynth products with known CVEs

ProductCVEs
Fluidsynth9
Fluidsynth CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-61723Medium6.82026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the unsi…
CVE-2026-61722Medium6.82026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates articulation chunks using…
CVE-2026-61721High8.02026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loop_s…
CVE-2026-61720Medium6.22026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modulator count as chunk…
CVE-2026-61714High7.82026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI…
CVE-2026-58264Critical9.82026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6, the FluidSynth command handler accepts a pitch_bend_range…
CVE-2025-56225High7.52026-01-09fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi f…
CVE-2025-68617High7.02025-12-23FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From versions 2.5.0 to before 2.5.2, a race condition during unloading of a DLS f…
CVE-2021-21417High7.22021-04-29fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered wh…