Most recent entries from all

bdu:2026-03010

EUVD-2026-265399

fkie_cve-2025-56225

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.

GHSA-qgg6-hj2r-3x43

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.

OESA-2026-1065 — fluidsynth security update

Affected: openEuler:24.03-LTS-SP3: fluidsynth

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use FluidSynth for audio synthesis. Security Fix(es):

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.(CVE-2025-56225)

openSUSE-SU-2026:10038-1 — fluidsynth-2.5.2-2.1 on GA media

fluidsynth-2.5.2-2.1 on GA media

UBUNTU-CVE-2025-56225

Affected: Ubuntu:Pro:14.04:LTS: fluidsynth, Ubuntu:Pro:16.04:LTS: fluidsynth, Ubuntu:Pro:18.04:LTS: fluidsynth, Ubuntu:Pro:20.04:LTS: fluidsynth, Ubuntu:Pro:22.04:LTS: fluidsynth, Ubuntu:Pro:24.04:LTS: fluidsynth

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.