Tildearrow vulnerabilities
Published CVEs affecting Tildearrow products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-4732
High · 8.4
CWE-125 Mar 24, 2026
Out-of-bounds Read Overflow in tildearrow/furnace
Out-of-bounds Read vulnerability in tildearrow furnace (extern/libsndfile-modified/src modules). This vulnerability is associated with program files flac.C.
This issue affects furnace: before 0.7.
CVE-2026-24800
Critical · 10.0
CWE-120 Jan 27, 2026
A heap-based buffer over-read or buffer overflow in tildearrow/furnace
Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C.