CVE-2021-21417: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days.

fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file.

Affected products

• Debian Debian Linux: version 9.0 only
• Fluidsynth Fluidsynth: before 2.1.8 (fixed in 2.1.8)

Published 2021-04-29. Last modified 2026-06-17.