7 matches found
UBUNTU-CVE-2026-111136
libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...
CVE-2026-111136
libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...
CVE-2026-111136
libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...
CVE-2026-111136 libInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch_sf2_gen_is_valid
libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...
EUVD-2026-102263
libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...
PT-2026-115142
Name of the Vulnerable Software and Affected Versions libInstPatch versions prior to 1.1.8 Description The SoundFont 2 loader contains a heap out-of-bounds write issue. This occurs because the ipatch sf2 gen is valid function fails to perform range-checks on generator IDs before the validity mask...
Swami Project libinstpatch buffer error vulnerability
The Swami Project libinstpatch versions 1.1.7 and earlier contain a buffer error vulnerability. This vulnerability stems from the ipatchsf2genisvalid function in the SoundFont 2 loader, which does not perform a range check on the generator ID before the validity mask test. Attackers can exploit...