Unrated severityOSV Advisory· Published Jan 9, 2026· Updated Jan 12, 2026
CVE-2025-56225
CVE-2025-56225
Description
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.
Affected products
1- Range: v1.1.2, v1.1.3, v1.1.4, …
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.