Remote Code Execution (RCE)

FluidSynth is vulnerable to remote code execution. The vulnerability exists due to a use after free in sfloader/fluidsffile.c that can result in arbitrary code execution or a denial of service DoS if a malicious soundfont2 file is loaded into a fluidsynth library...