CVE-2026-61721

creationtimestamp| type| source ---|---|--- 2026-09-20 21:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvy3sjpcww2z 2026-09-22 18:10:24+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117316033333467264...

CVE-2026-61721

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loopstart and wsmp.looplength values to samples without calling fluidsamplevalidate or fluidsamplesanitizeloop. A crafted DLS file can place...