All 9 CVE vulnerabilities found in fluidsynth, with AI-generated Chinese analysis, references, and POCs.
Vendor: FluidSynth
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-111123 | FluidSynth through 2.6.1 Out-of-Bounds Write via SoundFont Modulator Destination CWE-787 | 6.1 | Medium | 2026-10-15 |
| CVE-2026-61720 | FluidSynth: SF2 DMOD Chunk Unsigned Underflow CWE-191 | 6.2 | Medium | 2026-09-18 |
| CVE-2026-61723 | FluidSynth: DLS ptbl Chunk Integer Overflow CWE-190 | 6.8 | Medium | 2026-09-18 |
| CVE-2026-61722 | FluidSynth: DLS Articulation Chunk Integer Overflow CWE-190 | 6.8 | Medium | 2026-09-18 |
| CVE-2026-61714 | FluidSynth: Heap Buffer Overflow in MIDI Player CWE-122 | 7.8 | High | 2026-09-18 |
| CVE-2026-61721 | FluidSynth: Heap-based buffer overrun for DLS samples CWE-122 | 8.0 | High | 2026-09-18 |
| CVE-2026-58264 | FluidSynth: Heap-based buffer overrun CWE-122 | 9.8 | Critical | 2026-09-18 |
| CVE-2025-68617 | Use after free in fluidsynth CWE-416 | 7.0 | High | 2025-12-23 |
| CVE-2021-21417 | Use after free in fluidsynth CWE-416 | 7.2 | High | 2021-04-29 |
All 9 known CVE vulnerabilities affecting fluidsynth with full Chinese analysis, references, and POCs where available.