CyberSecBulletin

MuseScore vulnerabilities

We track 2 vulnerabilities in MuseScore products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 3, 2024.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest MuseScore vulnerabilities

  • 7.8 High severity

    MuseScore: Out-of-bounds Write

    CVE-2023-44428MuseScore

    MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MuseScore. User interaction is required to exploit this vulnerability i

  • 7.0 High severity

    Musescore: Out-of-bounds Write

    CVE-2023-26923MuseScore

    Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code.