CVE-2026-61723

FluidSynth (a software synthesizer based on the SoundFont 2 specifications) versions 2.5.0 through 2.5.6 are affected by an integer overflow in the native DLS parser's ptbl chunk validation. The expression cues * 4 + cbsize uses 32-bit unsigned arithmetic without bounds checking; with cues = 0x40...

CVE-2026-61723 FluidSynth: DLS ptbl Chunk Integer Overflow

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the unsigned expression cues 4 + cbsize without checking whether the multiplication and addition fit in 32 bits. A crafted DLS file can supply a...

UBUNTU-CVE-2026-61723

DLS ptbl chunk integer overflow...