GLSA-202107-34 : FluidSynth: Remote code execution

The remote host is affected by the vulnerability described in GLSA-202107-34 FluidSynth: Remote code execution FluidSynth contains a use-after-free in sfloader/fluidsffile.c which occurs when parsing Soundfile 2 files. Impact : A remote attacker could entice a user to open a specially crafted...

Remote Code Execution (RCE)

FluidSynth is vulnerable to remote code execution. The vulnerability exists due to a use after free in sfloader/fluidsffile.c that can result in arbitrary code execution or a denial of service DoS if a malicious soundfont2 file is loaded into a fluidsynth library...

PT-2021-17863

Name of the Vulnerable Software and Affected Versions: FluidSynth version 2.1.7 Description: The issue is related to a use after free vulnerability in the sfloader/fluid sffile.c file. This can lead to arbitrary code execution or a denial of service DoS if a malicious soundfont2 file is loaded in...