Skip to content
OpenAdvisories

Package · Debian

tuxguitar

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.5
    CVE-2026-55543

    TuxGuitar: Arbitrary Code Execution via maliciously crafted `.tg` file

    TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file itself, whose META-INF/services/javax.sound.midi.Soundbank entry names an attacker…

    helge17 tuxguitar tuxguitar tuxguitar Debian Ubuntu
  • Unscored —
    CVE-2020-14940

    An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading…

    tuxguitar tuxguitar Debian Ubuntu
  • Unscored —
    CVE-2010-3385

    TuxGuitar 1.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges v…

    tuxguitar Debian