https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T16:13:21.836539+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111154 fkie_cve-2026-111154 2026-10-20T16:13:21.887593+00:00

libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators in parse_gen. Attackers can supply a crafted .sf2 file with out-of-range pgen/igen operator values to write chosen 16-bit values near the stack Layer object, causing crashes and stack memory corruption.

 https://db.gcve.eu/vuln/ghsa-qg69-jphp-p9g8 GHSA-qg69-jphp-p9g8 2026-10-20T16:13:21.887707+00:00

libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators in parse_gen. Attackers can supply a crafted .sf2 file with out-of-range pgen/igen operator values to write chosen 16-bit values near the stack Layer object, causing crashes and stack memory corruption.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-111154 UBUNTU-CVE-2026-111154 2026-10-20T16:13:21.887742+00:00

Affected: Ubuntu:16.04:LTS: timidity, Ubuntu:18.04:LTS: timidity, Ubuntu:20.04:LTS: timidity, Ubuntu:22.04:LTS: timidity, Ubuntu:24.04:LTS: timidity, Ubuntu:26.10: timidity, Ubuntu:26.04:LTS: timidity

libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators in parse_gen. Attackers can supply a crafted .sf2 file with out-of-range pgen/igen operator values to write chosen 16-bit values near the stack Layer object, causing crashes and stack memory corruption.