Lucene search
K

42 matches found

Fedora
Fedora
added 2026/01/18 1:45 a.m.4 views

[SECURITY] Fedora 42 Update: musescore-4.3.2-20.fc42

MuseScore is a free cross platform WYSIWYG music notation program. Some highlights: WYSIWYG, notes are entered on a "virtual note sheet" Unlimited number of staves Up to four voices per staff Easy and fast note entry with mouse, keyboard or MIDI Integrated sequencer and FluidSynth software...

7.5CVSS6.9AI score0.00029EPSS
Exploits1
OSV
OSV
added 2026/01/16 11:57 a.m.1 views

OESA-2026-1070 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

7.5CVSS7AI score0.00029EPSS
Exploits1References2
OSV
OSV
added 2026/01/16 11:57 a.m.2 views

OESA-2026-1066 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

7.5CVSS7AI score0.00029EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:28 a.m.3 views

CVE-2021-33897

A buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user-assisted attackers to cause a denial of service application crash via a crafted MIDI file with malformed bytes. This file is mishandled during a deletion attempt. In Synthesia before 10.9, an improper pa...

5.5CVSS7AI score0.00065EPSS
Exploits0References1
Fedora
Fedora
added 2025/12/29 5:24 p.m.5 views

[SECURITY] Fedora 42 Update: fluidsynth-2.5.2-1.fc42

FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI even ts from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...

7CVSS7AI score0.00027EPSS
Exploits1
Fedora
Fedora
added 2025/10/30 4:35 a.m.3 views

[SECURITY] Fedora 42 Update: fluidsynth-2.4.8-2.fc42

FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI even ts from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...

7AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-20570

Malware in sbrugna...

5.5CVSS5.6AI score0.00065EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2023-26923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information,...

7CVSS7.8AI score0.00082EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 3:30 a.m.5 views

CVE-2023-26923

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code...

7CVSS7.8AI score0.00082EPSS
Exploits1References1
OSV
OSV
added 2023/03/28 3:15 p.m.9 views

CVE-2023-26923

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code...

7CVSS7.5AI score
Exploits0References1
NVD
NVD
added 2023/03/28 3:15 p.m.7 views

CVE-2023-26923

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code...

7CVSS7.2AI score0.00082EPSS
Exploits1References1
Prion
Prion
added 2023/03/28 3:15 p.m.62 views

Stack overflow

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code...

3.7CVSS7.2AI score0.00082EPSS
Exploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2023/03/28 3:15 p.m.23 views

CVE-2023-26923

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code...

7CVSS7.4AI score0.00082EPSS
Exploits1References2
CVE
CVE
added 2023/03/28 12:0 a.m.78 views

CVE-2023-26923

CVE-2023-26923 affects MuseScore versions 3.0 through 4.0.1. The vulnerability is a stack buffer overflow that occurs when parsing misconfigured MIDI files, potentially allowing an attacker to execute arbitrary code. The CVE is characterized by a local attack vector with high impact on confidenti...

7CVSS7.2AI score0.00082EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2023/03/28 12:0 a.m.20 views

CVE-2023-26923

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code...

7CVSS7.2AI score0.00082EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2023/03/28 12:0 a.m.13 views

CVE-2023-26923

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code...

7CVSS7.4AI score0.00082EPSS
Exploits1References1
OSV
OSV
added 2018/01/04 4:48 p.m.4 views

MGASA-2018-0061 Updated wildmidi packages fix security vulnerabilities

The WMSetupMidiEvent function in internalmidi.c:2318 in WildMIDI before 0.4.2 can cause a denial of serviceinvalid memory read and application crash via a crafted mid file CVE-2017-11661. The WMParseNewMidi function in fmidi.c in WildMIDI before 0.4.2 can cause a denial of serviceinvalid memory...

7.5CVSS6.4AI score0.14166EPSS
Exploits7References3
OSV
OSV
added 2017/08/17 4:29 p.m.0 views

UBUNTU-CVE-2017-11662

The WMParseNewMidi function in fmidi.c in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

7.5CVSS7.1AI score0.14166EPSS
Exploits3References5
OSV
OSV
added 2017/07/31 1:29 p.m.0 views

UBUNTU-CVE-2017-11549

The playmidi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted mid file. NOTE: CPU consumption might be relevant when using the --background option...

5.5CVSS6AI score0.00229EPSS
Exploits0References3
FreeBSD
FreeBSD
added 2017/07/31 12:0 a.m.18 views

TiMidity++ -- Multiple vulnerabilities

qflb.wu of DBAPPSecurity reports: Ihe insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 can cause a denial of servicedivide-by-zero error and application crash via a crafted mid file. The resamplegauss function in resample.c in TiMidity++ 2.14.0 can cause a denial of...

5.5CVSS2.2AI score0.00209EPSS
Exploits0References1
Rows per page
Query Builder