CVE-2026-111136

A flaw was found in libinstpatch. The SoundFont 2 SF2 loader fails to properly validate generator identifiers before processing them, resulting in a heap-based buffer overflow. By convincing a user or application to open a specially crafted SF2 file, an attacker can corrupt memory, causing the...