Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : FluidSynth vulnerabilities (USN-8885-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8885-1 advisory. It was discovered that FluidSynth did not properly validate the channel argument of the pitchbendrange...

USN-8885-1 fluidsynth vulnerabilities

It was discovered that FluidSynth did not properly validate the channel argument of the pitchbendrange command. A remote attacker could possibly use this issue to cause FluidSynth to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-58264 It was discovered that FluidSyn...

CVE-2026-61714

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...

UBUNTU-CVE-2026-61714

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...

CVE-2026-61714 FluidSynth: Heap Buffer Overflow in MIDI Player

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...

CVE-2026-61714 FluidSynth: Heap Buffer Overflow in MIDI Player

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index fluidplayert::channelisplaying outside its fixed-size heap allocation while tracking active channels. The resulting...

CVE-2026-61714

FluidSynth (SoundFont 2 software synthesizer) versions 2.2.4 through 2.5.6 contain a heap buffer overflow in the MIDI player. When synth.midi-channels is configured above the default of 16, the code indexes _fluid_player_t::channel_isplaying outside its fixed-size heap allocation, causing out-of-...

OESA-2026-3168 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

PT-2026-67247

Name of the Vulnerable Software and Affected Versions FluidSynth affected versions not specified Description A heap-based buffer overflow exists in the MIDI player. When the synthesizer is configured with the synth.midi-channels variable set to a value greater than 16, an out-of-bounds memory...

EUVD-2011-0521

Malware in sbrugna...

USN-4807-1: WildMIDI vulnerabilities

It was discovered that WildMIDI incorrectly handled certain MID files. A remote attacker could possibly use this issue to cause a denial of service...

[SECURITY] Fedora 26 Update: wildmidi-0.4.2-1.fc26

WildMidi is a software midi player which has a core softsynth library that can be used with other applications...

Music-Animation-Machine-MIDI-Player-SEH

Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 junk='\x41' 112 seh='\xeb\x06\x90\x90' pad='\x90' 10 junk2='\x42' 9496 Sor...

Music Animation Machine MIDI Player SEH BOF

No description provided by source. Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 Tested on: Windows XP SP2 SE Virtualbox...

AKoff MIDI Player 1.00 - Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl AKoff MIDI Player 1.00 Buffer Overflow Exploit By cr4wl3r cr4wl3r\x40linuxmail\x2Eorg gr33tz: str0ke, opt!x hacker, xoron, EA ngel, zvtral, Hmei7, mywisdom, cyberlog, irvian, and all my friend thanks: milw0rm, darkc0de, exploit-db, inj3ct0r,...

Music Animation Machine MIDI Player Local Crash PoC

No description provided by source. Exploit Title: Music Animation Machine MIDI Player Local Crash PoC Date: 1/3/2011 Author: c0d3R'Z Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: Release 035 Tested on: Windows XP SP2 EN VirtualBox The application crashes when try...

CVE-2011-0502

Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service crash and possibly have other unspecified impact via a long line in a MIDI .mid file...

CVE-2011-0501

Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long line in a .mamx file...

Design/Logic Flaw

Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service crash and possibly have other unspecified impact via a long line in a MIDI .mid file...

CVE-2011-0501

Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long line in a .mamx file...