CVE-2026-111155: Sezero Libtimidity

Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days.

libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument generator values as table indices. Attackers can supply a crafted .sf2 file loaded through mid_set_soundfont() to read heap memory out of bounds and crash the application.

Affected products

• Sezero Libtimidity: from 0.2.8, up to and including 0.2.8

Published 2026-10-15. Last modified 2026-10-16.