OESA-2026-1069 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

CVE-2025-56225

CVE-2025-56225 affects fluidsynth-2.4.6 and earlier. The root cause is a NULL pointer dereference in fluid_synth_monopoly.c triggered when loading an invalid MIDI file. This can impact availability (CVE base score 7.5, HIGH). The connected advisories show patches/updates: Fedora advisories (FEDOR...

CVE-2025-56225

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...