{"vulnerability": "cve-2026-6172", "sightings": [{"uuid": "5cdfac05-5a1b-432d-a1fc-f58b815cb51e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61721", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvy3sjpcww2z", "content": "\ud83d\udfe0 CVE-2026-61721 - High (8)\n\nFluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61721/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T21:01:47.586940Z"}, {"uuid": "3ec3539c-21b0-4564-9f85-4a4eb11123e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61721", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117316033333467264", "content": "CVE-2026-61721 FluidSynth out-of-bounds read via crafted DLS file, up to memory disclosure and DoS. CVSS 8. Fixed in 2.5.6, update now. https://www.valtersit.com/cve/CVE-2026-61721/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-22T18:10:24.076121Z"}, {"uuid": "f41bc227-86c2-42c3-9e6a-f40f2570c4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61720", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwhvyyckfw2j", "content": "CVE-2026-61720 FluidSynth SF2 parser DoS: zero-sized DMOD chunk wraps count to UINT_MAX, triggering billions of allocations and memory exhaustion. CVSS 6.2. Patched in 2.5.6, no workaround. Update now. https://www.valtersit.com/cve/CVE-2026-61720/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T04:00:37.898485Z"}, {"uuid": "ba81e19e-a375-48bd-89a6-41d439ff3935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61720", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117341004563392922", "content": "CVE-2026-61720 FluidSynth SF2 parser DoS: zero-sized DMOD chunk wraps count to UINT_MAX, triggering billions of allocations and memory exhaustion. CVSS 6.2. Patched in 2.5.6, no workaround. Update now. https://www.valtersit.com/cve/CVE-2026-61720/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T04:00:39.097895Z"}, {"uuid": "46bc657f-4569-401d-9a1b-a7c23241f29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61722", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117344071030086838", "content": "CVE-2026-61722 FluidSynth 2.5.0-2.5.6: crafted DLS file triggers integer overflow in the native parser, bypassing chunk-size checks and causing a denial of service through massive out-of-bounds iterations. CVSS 6.8. Patch to https://www.valtersit.com/cve/CVE-2026-61722/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T17:00:29.486639Z"}, {"uuid": "27a15c5b-e164-4b8c-9c67-92ac45e303b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61722", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwjbljmgge27", "content": "CVE-2026-61722 FluidSynth 2.5.0-2.5.6: crafted DLS file triggers integer overflow in the native parser, bypassing chunk-size checks and causing a denial of service through massive out-of-bounds iterations. CVSS 6.8. Patch to https://www.valtersit.com/cve/CVE-2026-61722/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T17:00:30.094660Z"}]}