Fluidsynth

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-56225 Jan 09, 16:16 HIGH POC PATCH This Week

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file. [CVSS 7.5 HIGH]

Null Pointer Dereference Fluidsynth Suse

NVD GitHub

CVSS 3.1

7.5

EPSS

0.0%

CVE-2021-21417 Apr 29, 17:15 MEDIUM POC This Month

fluidsynth is a software synthesizer based on the SoundFont 2 specifications. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Use After Free Memory Corruption Debian Debian Linux +1

NVD GitHub

CVSS 3.1

5.5

EPSS

0.9%

CVE-2025-56225

EPSS 0% CVSS 7.5

HIGH POC PATCH This Week

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file. [CVSS 7.5 HIGH]

Null Pointer Dereference Fluidsynth Suse

NVD GitHub

CVE-2021-21417

EPSS 1% CVSS 5.5

MEDIUM POC This Month

Denial Of Service Use After Free Memory Corruption +3

NVD GitHub