Libmt32emu (< 2.8.4) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/libmt32emu--2.8.4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 04 Nov 2026 16:50:02 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svglibmt32emu: Heap buffer overflow in MidiStreamParserImpl::parseSysex (CVE-2026-121941)https://feed.craftedsignal.io/briefs/2026-11-libmt32emu-heap-overflow/Wed, 04 Nov 2026 16:50:02 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-libmt32emu-heap-overflow/A heap-based buffer overflow in libmt32emu allows attackers to corrupt heap memory and crash the application by supplying SysEx messages exceeding 32,768 bytes.<p>The libmt32emu library before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::parseSysex. Attackers can write past a heap allocation by supplying oversized, unterminated SysEx messages exceeding 32,768 bytes. This data can be fed through the mt32emu_parse_stream API via MIDI files, ports, or sequencer clients, resulting in heap memory corruption and application crashes.</p> highadvisory