libinstpatch-1_0-2-1.1.8-1.1 on GA media (moderate)

libinstpatch-10-2-1.1.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:12199-1 Rating: moderate Cross-References: CVE-2026-111136 CVSS scores: CVE-2026-111136 SUSE : 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2026-111136 SUSE : 6.9...

[SECURITY] Fedora 45 Update: libinstpatch-1.1.8-1.fc45

libInstPatch stands for lib-Instrument-Patch and is a library for processing digital sample based MIDI instrument =E2=80=9Cpatch=E2=80=9D files. The types of files libInstPatch supports are used for creating instrument sounds for wavetable synthesis. libInstPatch provides an object framework base...

Fedora 45 : libinstpatch (2026-b2192a44f4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b2192a44f4 advisory. Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak. Tenable has extracted the preceding description block directly from the Fedora...

[SECURITY] Fedora 43 Update: libinstpatch-1.1.8-1.fc43

libInstPatch stands for lib-Instrument-Patch and is a library for processing digital sample based MIDI instrument =E2=80=9Cpatch=E2=80=9D files. The types of files libInstPatch supports are used for creating instrument sounds for wavetable synthesis. libInstPatch provides an object framework base...

[SECURITY] Fedora 44 Update: libinstpatch-1.1.8-1.fc44

libInstPatch stands for lib-Instrument-Patch and is a library for processing digital sample based MIDI instrument =E2=80=9Cpatch=E2=80=9D files. The types of files libInstPatch supports are used for creating instrument sounds for wavetable synthesis. libInstPatch provides an object framework base...

Fedora 43 : libinstpatch (2026-7f1bcc426b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7f1bcc426b advisory. Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 44 : libinstpatch (2026-4f2f5250d6)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4f2f5250d6 advisory. Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak. Tenable has extracted the preceding description block directly from the Fedora...

OPENSUSE-SU-2026:12199-1 libinstpatch-1_0-2-1.1.8-1.1 on GA media

These are all security issues fixed in the libinstpatch-10-2-1.1.8-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-111136

A flaw was found in libinstpatch. The SoundFont 2 SF2 loader fails to properly validate generator identifiers before processing them, resulting in a heap-based buffer overflow. By convincing a user or application to open a specially crafted SF2 file, an attacker can corrupt memory, causing the...

SUSE CVE-2026-111136

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

Linux Distros Unpatched Vulnerability : CVE-2026-111136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generato...

UBUNTU-CVE-2026-111136

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

DEBIAN-CVE-2026-111136

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

CVE-2026-111136

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

CVE-2026-111136

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

CVE-2026-111136 libInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch_sf2_gen_is_valid

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

CVE-2026-111136 libInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch_sf2_gen_is_valid

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

CVE-2026-111136

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

CVE-2026-111136 libInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch_sf2_gen_is_valid

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

EUVD-2026-102263

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...