Remote Code Execution (RCE)

FluidSynth is vulnerable to remote code execution. The vulnerability exists due to a use after free in sfloader/fluidsffile.c that can result in arbitrary code execution or a denial of service DoS if a malicious soundfont2 file is loaded into a fluidsynth library...

CVE-2021-28421

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-21417. Reason: This candidate is a duplicate of CVE-2021-21417. Notes: All CVE users should reference CVE-2021-21417 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

PT-2021-17863

Name of the Vulnerable Software and Affected Versions: FluidSynth version 2.1.7 Description: The issue is related to a use after free vulnerability in the sfloader/fluid sffile.c file. This can lead to arbitrary code execution or a denial of service DoS if a malicious soundfont2 file is loaded in...