CVE-2026-111156

CVE-2026-111156 · libTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in init_soundfont() in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry tonebank or drumset arrays, causing heap memory reads, writes, and application crashes.

CVSS 6.9 · Media · EPSS 0,1%

Publicación

2026-10-15T18:57:45.506Z

Actualización

2026-10-15T19:35:40.462Z

Pila tecnológica: system

Comprueba tu servidor →