Skip to content
OpenAdvisories

Package · Ubuntu

tuxguitar

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.5
    CVE-2026-55543

    TuxGuitar: Arbitrary Code Execution via maliciously crafted `.tg` file

    TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file itself, whose META-INF/services/javax.sound.midi.Soundbank entry names an attacker…

    helge17 tuxguitar tuxguitar tuxguitar Debian Ubuntu
  • Unscored —
    CVE-2020-14940

    An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading…

    tuxguitar tuxguitar Debian Ubuntu