CVE-2021-21417CWE-416

Use after free in fluidsynth

High · published April 29, 2021

CVSS v3.1
7.2
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00944 · 60.7th percentile
Weakness
CWE-416 · Use After Free
Published
2021-04-29T17:10Z
EPSS history
Timeline
  • 29 APR 17:10Z
    Use after free in fluidsynth
    cvelistv5