What’s Vulnerable › Products

fluidsynth vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your fluidsynth version is affected

Latest fluidsynth vulnerabilities

• CVE-2026-111123 — FluidSynth through 2.6.1 Out-of-Bounds Write via SoundFont Modulator Destination (CVSS 6.1)
• CVE-2026-61723 — FluidSynth: DLS ptbl Chunk Integer Overflow (CVSS 6.8)
• CVE-2026-61722 — FluidSynth: DLS Articulation Chunk Integer Overflow (CVSS 6.8)
• CVE-2026-61721 — FluidSynth: Heap-based buffer overrun for DLS samples (CVSS 8.0)
• CVE-2026-61720 — FluidSynth: SF2 DMOD Chunk Unsigned Underflow (CVSS 6.2)
• CVE-2026-61714 — FluidSynth: Heap Buffer Overflow in MIDI Player (CVSS 7.8)
• CVE-2026-58264 — FluidSynth: Heap-based buffer overrun (CVSS 9.8)
• CVE-2025-56225 — (CVSS 7.5)
• CVE-2025-68617 — Use after free in fluidsynth (CVSS 7.0)
• CVE-2021-21417 — Use after free in fluidsynth (CVSS 5.5)