CVE-2026-61722 FluidSynth: DLS Articulation Chunk Integer Overflow

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates articulation chunks using the unsigned expression cbsize + connblocks 12 without first ensuring that the multiplication and addition fit in 32 bits. A crafted DLS...

CVE-2026-61722

FluidSynth (a software synthesizer based on the SoundFont 2 specifications) has an integer overflow in its native DLS parser's articulation chunk validation. The unsigned expression cbsize + connblocks * 12 overflows in 32-bit arithmetic when a crafted DLS file supplies a large connblocks value (...

Google Android sonivox library DLSParser denial of service vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA. sonivox library is a digital music library. dlsparser is a DLS parser. A denial of service vulnerability exists in the DLSParser of the sonivox library in Android. A remote attacker can...