CVE-2026-111156: Out-of-bounds Write

libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...

CVE-2026-111155: Out-of-bounds Read

libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument generator values as table indices. Attackers can supply a crafted .sf2 file loaded through midsetsoundfont to read heap memory out of...

PT-2026-115161

Name of the Vulnerable Software and Affected Versions libTiMidity versions prior to 0.2.9 Description The SoundFont loader in src/sndfont.c contains a heap out-of-bounds read issue. This occurs because the software uses unvalidated sampleId and instrument generator values as table indices. An...