CyberSecBulletin

Tildearrow vulnerabilities

We track 2 vulnerabilities in Tildearrow products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 24, 2026.

2vulnerabilities
1critical
1high
0exploited
9.2average CVSS score

Latest Tildearrow vulnerabilities

  • 8.4 High severity

    furnace: Out-of-bounds Read

    CVE-2026-4732Tildearrow

    Out-of-bounds Read vulnerability in tildearrow furnace (‎extern/libsndfile-modified/src modules). This vulnerability is associated with program files flac.C‎. This issue affects furnace: before 0.7.

  • 10.0 Critical severity

    furnace: Buffer Copy without Checking Size of Input

    CVE-2026-24800Tildearrow

    Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C.