6 matches found
CVE-2026-111156
libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...
CVE-2026-111156
The libTiMidity library, in versions through 0.2.8 , is vulnerable to an out-of-bounds access flaw within the init_soundfont() function in src/sndfont.c. The root cause is the processing of unvalidated SF2 preset header bank and preset values . By providing a maliciously crafted .sf2 file with ba...
CVE-2026-111156 libTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header
libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...
EUVD-2026-102283
libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...
CVE-2026-111155
libTiMidity versions through 0.2.8 are vulnerable to a heap out-of-bounds read in the SoundFont loader located at src/sndfont.c. The root cause is the use of unvalidated sampleId and instrument generator values as table indices. An attacker can provide a crafted .sf2 file via the mid_set_soundfon...
CVE-2026-111155 libTiMidity through 0.2.8 Out-of-Bounds Read via SoundFont Loader sndfont.c
libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument generator values as table indices. Attackers can supply a crafted .sf2 file loaded through midsetsoundfont to read heap memory out of...