CVE-2026-121941

libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::parseSysex that allows attackers to write past a heap allocation by supplying oversized unterminated SysEx messages. Attackers can feed more than 32768 SysEx data bytes through the mt32emuparsestream AP...

CVE-2026-121941 libmt32emu before 2.8.4 Heap Buffer Overflow via MidiStreamParserImpl::parseSysex

libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::parseSysex that allows attackers to write past a heap allocation by supplying oversized unterminated SysEx messages. Attackers can feed more than 32768 SysEx data bytes through the mt32emuparsestream AP...

CVE-2026-121941

The libmt32emu library (versions prior to 2.8.4 ) is vulnerable to a heap buffer overflow in the MidiStreamParserImpl::parseSysex function. An attacker can exploit this by providing oversized, unterminated SysEx messages—specifically exceeding 32,768 data bytes—through the mt32emu_parse_stream AP...

CVE-2026-121941 libmt32emu before 2.8.4 Heap Buffer Overflow via MidiStreamParserImpl::parseSysex

libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::parseSysex that allows attackers to write past a heap allocation by supplying oversized unterminated SysEx messages. Attackers can feed more than 32768 SysEx data bytes through the mt32emuparsestream AP...

EUVD-2026-116898

libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::parseSysex that allows attackers to write past a heap allocation by supplying oversized unterminated SysEx messages. Attackers can feed more than 32768 SysEx data bytes through the mt32emuparsestream AP...

CVE-2026-121941: munt libmt32emu: libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::parseSysex that allows…

libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::parseSysex that allows attackers to write past a heap allocation by supplying oversized unterminated SysEx messages. Attackers can feed more than 32768 SysEx data bytes through the mt32emuparsestream AP...