← Back

Synaesthesia

synaesthesia

Vendor: Synaesthesia • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Synaesthesia
1Synaesthesia
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
7.2 HIGH· v2
Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.
1Synaesthesia
1Synaesthesia
Apr 16, 2026
Mar 29, 2004
N/A· v4
N/A· v3
7.2 HIGH· v2
Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.