949 matches found
CVE-2026-1306
CVE-2026-1306 — midi-Synth WordPress A Python-based, multi-target executable PoC / list runner for CVE-2026-1306 in the WordPress midi-Synth plugin. What does it do? Collects the midiSynthnonce value via HTTP from pages where the midiSynth shortcode is loaded on target sites. Sends an action=expo...
WordPress midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload
WordPress midi-Synth plugin \u003C= 1.1.0 contains an unrestricted file upload vulnerability caused by missing file type and extension validation in the 'export' AJAX action, letting unauthenticated attackers upload arbitrary files and potentially execute remote code, exploit requires attacker to...
CVE-2026-98770
A flaw was found in the Linux kernel's USB gadget MIDI 2.0 driver. Under-sized descriptor arrays allow a local user to trigger an out-of-bounds memory access when setting up a large number of MIDI jacks through the configuration filesystem configfs. This issue primarily results in memory corrupti...
CVE-2026-90024
A flaw was found in the Linux kernel's USB MIDI 2.0 gadget function. When the MIDI 2.0 gadget is configured with a specific input block direction, an endpoint may not be properly initialized. During subsequent endpoint cleanup, an attempt to access this uninitialized endpoint can lead to a...
CVE-2026-111161
libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BWMidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adlopenFile or adlopenDa...
CVE-2026-111161 libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequencer noteStates
libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BWMidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adlopenFile or adlopenDa...
EUVD-2026-102288
libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BWMidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adlopenFile or adlopenDa...
CVE-2026-111161 libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequencer noteStates
libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BWMidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adlopenFile or adlopenDa...
CVE-2026-111161
The libADLMIDI library, versions 1.6.2 through 1.6.2.1 , is vulnerable to an off-by-one stack out-of-bounds write within the BW_MidiSequencer component. An attacker can corrupt stack memory by providing a crafted MIDI file containing a note-on message with status 0x9F and note 0x7F . The vulnerab...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device The usb6firecommreceiverhandler function forwards a MIDI event using a length byte provided by the device. There is no binding or check that ensures the transfer delivers...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Remove sndBUGON from sndusbmidioutputopen The function sndusbmidioutputopen includes a check for the NULL port, which involves calling sndBUGON. The use of sndBUGON was intended to prevent such issues from...
SUSE CVE-2026-98428
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded URBs The USB 6fire driver uses URBs embedded in different structs for PCM, MIDI and communication, and this is basically a buggy implementation nowadays; since a URB is managed with a refcount, th...
CVE-2026-111161: Out-of-bounds Write
libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BWMidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adlopenFile or adlopenDa...
EUVD-2026-101077
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded URBs The USB 6fire driver uses URBs embedded in different structs for PCM, MIDI and communication, and this is basically a buggy implementation nowadays; since a URB is managed with a refcount, th...
CVE-2026-98428
The Linux kernel contains a vulnerability in the USB 6fire driver due to the use of embedded URBs (USB Request Blocks) within various structures for PCM, MIDI, and communication. Because URBs are managed with a reference count, this buggy implementation can lead to a Use-After-Free (UAF) conditio...
PT-2026-114407
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The USB 6fire driver in the ALSA Advanced Linux Sound Architecture subsystem uses URBs USB Request Blocks embedded within different structures for PCM, MIDI, and communication. Because...
UBUNTU-CVE-2026-98428
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded URBs The USB 6fire driver uses URBs embedded in different structs for PCM, MIDI and communication, and this is basically a buggy implementation nowadays; since a URB is managed with a refcount, th...
CVE-2026-88079
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...