Furnace vulnerabilities

2 known vulnerabilities in Furnace from Tildearrow. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  furnace: Out-of-bounds Read

  CVE-2026-4732Mar 24, 2026Tildearrow

  Out-of-bounds Read vulnerability in tildearrow furnace (‎extern/libsndfile-modified/src modules). This vulnerability is associated with program files flac.C‎. This issue affects furnace: before 0.7.

• 10.0 Critical severity

  furnace: Buffer Copy without Checking Size of Input

  CVE-2026-24800Jan 27, 2026Tildearrow

  Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C.