Описание
fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file.
Ссылки
- ExploitThird Party Advisory
- ExploitIssue TrackingPatchThird Party Advisory
- Third Party Advisory
- Mailing ListThird Party Advisory
- ExploitThird Party Advisory
- ExploitIssue TrackingPatchThird Party Advisory
- Third Party Advisory
- Mailing ListThird Party Advisory
Уязвимые конфигурации
EPSS
7.2 High
CVSS3
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
Связанные уязвимости
fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file.
fluidsynth is a software synthesizer based on the SoundFont 2 specific ...
Уязвимость программного синтезатора FluidSynth, связанная с использованием памяти после её освобождения, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2021-1496: package `fluidsynth` update to version 2.1.8-alt1
EPSS
7.2 High
CVSS3
5.5 Medium
CVSS3
4.3 Medium
CVSS2