GLSA-202107-34 : FluidSynth: Remote code execution

The remote host is affected by the vulnerability described in GLSA-202107-34 FluidSynth: Remote code execution FluidSynth contains a use-after-free in sfloader/fluidsffile.c which occurs when parsing Soundfile 2 files. Impact : A remote attacker could entice a user to open a specially crafted...

Remote Code Execution (RCE)

FluidSynth is vulnerable to remote code execution. The vulnerability exists due to a use after free in sfloader/fluidsffile.c that can result in arbitrary code execution or a denial of service DoS if a malicious soundfont2 file is loaded into a fluidsynth library...