Debian/fluidsynth: unknown

FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modulator destination values. Attackers

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

osv: DEBIAN-CVE-2026-111123#Debian:14/fluidsynth
https://security-tracker.debian.org/tracker/CVE-2026-111123

published 2026-10-15T19:17:25.460Z · modified 2026-10-16T06:00:08.950749856Z · JSON