CVE-2021-21417highCWE-416

CVE-2021-21417: falha de alta gravidade em fluidsynth

Use after free in fluidsynth

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar fluidsynth+ Monitorar fluidsynth

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 0.9%
fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
Produtos afetados
FluidSynth · fluidsynth
CVEs relacionadas — fluidsynth

No mesmo produto, das mais perigosas para as menos.

CVE-2026-58264CRITICALFluidSynth: Heap-based buffer overrunEPSS 0.6%CVE-2025-68617HIGHUse after free in fluidsynthEPSS 0.2%CVE-2026-61722MEDIUMFluidSynth: DLS Articulation Chunk Integer OverflowEPSS 0.2%CVE-2026-111123MEDIUMFluidSynth through 2.6.1 Out-of-Bounds Write via SoundFont Modulator DestinationEPSS 0.2%CVE-2026-61721HIGHFluidSynth: Heap-based buffer overrun for DLS samplesEPSS 0.2%CVE-2026-61720MEDIUMFluidSynth: SF2 DMOD Chunk Unsigned UnderflowEPSS 0.2%