CVE-2026-111136

A flaw was found in libinstpatch. The SoundFont 2 SF2 loader fails to properly validate generator identifiers before processing them, resulting in a heap-based buffer overflow. By convincing a user or application to open a specially crafted SF2 file, an attacker can corrupt memory, causing the...

DEBIAN-CVE-2026-111136

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

CVE-2026-111136

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

EUVD-2026-102263

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

CVE-2026-111136

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

CVE-2026-111136

The libInstPatch library (through version 1.1.7 ) is vulnerable to a heap out-of-bounds write in its SoundFont 2 loader. The root cause is that the ipatch_sf2_gen_is_valid() function fails to perform a range-check on generator IDs before executing a validity mask test. An attacker can exploit thi...

CVE-2026-111136 libInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch_sf2_gen_is_valid

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

CVE-2026-111136 libInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch_sf2_gen_is_valid

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatchsf2genisvalid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...

PT-2026-115142

libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatch sf2 gen is valid does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write...