Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/15 7:17 p.m.•6 views

CVE-2026-111156

libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...

6.9CVSS
SaveExploits0References4
CVE
CVE
•added 2026/10/15 6:57 p.m.•10 views

CVE-2026-111156

The libTiMidity library, in versions through 0.2.8 , is vulnerable to an out-of-bounds access flaw within the init_soundfont() function in src/sndfont.c. The root cause is the processing of unvalidated SF2 preset header bank and preset values . By providing a maliciously crafted .sf2 file with ba...

6.9CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/15 6:57 p.m.•13 views

CVE-2026-111156 libTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header

libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...

6.9CVSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/15 6:57 p.m.•5 views

EUVD-2026-102283

libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in initsoundfont in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry...

6.9CVSS5.9AI score
SaveExploits0References4
CVE
CVE
•added 2026/10/15 6:57 p.m.•7 views

CVE-2026-111155

libTiMidity versions through 0.2.8 are vulnerable to a heap out-of-bounds read in the SoundFont loader located at src/sndfont.c. The root cause is the use of unvalidated sampleId and instrument generator values as table indices. An attacker can provide a crafted .sf2 file via the mid_set_soundfon...

6.9CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/15 6:57 p.m.•11 views

CVE-2026-111155 libTiMidity through 0.2.8 Out-of-Bounds Read via SoundFont Loader sndfont.c

libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument generator values as table indices. Attackers can supply a crafted .sf2 file loaded through midsetsoundfont to read heap memory out of...

6.9CVSS
SaveExploits0References4
Rows per page
Query Builder