Fluidsynth

10 CVEs in 1 Fluidsynth product, including Fluidsynth. Newest: CVE-2026-111123 (2026-10-15). Severity, EPSS and public exploits for each.

Fluidsynth products with known CVEs

ProductCVEs
Fluidsynth10
Fluidsynth CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-111123Medium6.12026-10-15FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFon…
CVE-2026-61723Medium6.82026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the unsi…
CVE-2026-61722Medium6.82026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates articulation chunks using…
CVE-2026-61721High8.02026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loop_s…
CVE-2026-61720Medium6.22026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modulator count as chunk…
CVE-2026-61714High7.82026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI…
CVE-2026-58264Critical9.82026-09-18FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6, the FluidSynth command handler accepts a pitch_bend_range…
CVE-2025-56225High7.52026-01-09fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi f…
CVE-2025-68617High7.02025-12-23FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From versions 2.5.0 to before 2.5.2, a race condition during unloading of a DLS f…
CVE-2021-21417High7.22021-04-29fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered wh…