138 matches found
OESA-2026-3604 libmodplug security update
The library which was part of the Modplug-xmms project. Security Fixes: libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplooped in src/loadpat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte...
CVE-2026-75904
A flaw was found in libmodplug. An out-of-bounds read vulnerability exists in the patsmplooped function when processing a specially crafted MIDI Musical Instrument Digital Interface file. This flaw occurs because the function incorrectly handles a sample index, leading to a read one byte before a...
Linux Distros Unpatched Vulnerability : CVE-2026-75904
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplooped in src/loadpat.cpp. The function validates only the upper bound of its sample index...
CVE-2026-75904
libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplooped in src/loadpat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array patloops, so an index of zero reads patloops-1, one byte...
CVE-2026-75904 libmodplug <= 0.8.9.1 - Out-of-Bounds Read in pat_smplooped via Crafted MIDI File
libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplooped in src/loadpat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array patloops, so an index of zero reads patloops-1, one byte...
CVE-2026-75904 libmodplug <= 0.8.9.1 - Out-of-Bounds Read in pat_smplooped via Crafted MIDI File
libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplooped in src/loadpat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array patloops, so an index of zero reads patloops-1, one byte...
CVE-2026-75904: Out-of-bounds Read
libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplooped in src/loadpat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array patloops, so an index of zero reads patloops-1, one byte...
OPENSUSE-SU-2026:20291-1 Security update for fluidsynth
This update for fluidsynth fixes the following issues: - CVE-2025-56225: NULL pointer deference when loading and invalid MIDI file bsc1256435...
OESA-2026-1067 fluidsynth security update
FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...
OESA-2026-1069 fluidsynth security update
FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...
Security update for fluidsynth (moderate)
openSUSE Security Update: Security update for fluidsynth Announcement ID: openSUSE-SU-2026:0014-1 Rating: moderate References: 1256435 Cross-References: CVE-2025-56225 CVSS scores: CVE-2025-56225 SUSE: 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE...
Linux Distros Unpatched Vulnerability : CVE-2025-56225
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...
CVE-2025-56225
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...
CVE-2025-56225
The software synthesizer FluidSynth (versions 2.4.6 and earlier ) is vulnerable to a Null pointer dereference within the fluid_synth_monopoly.c component. This flaw is triggered during the processing of an invalid MIDI file , which can lead to a system failure . This vulnerability has been identi...
CVE-2025-56225
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...
CVE-2025-56225: NULL Pointer Dereference
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...
EUVD-2011-0522
Malware in sbrugna...
EUVD-2017-3276
Malware in sbrugna...