CVE-2026-24800

A heap-based buffer over-read or buffer overflow in tildearrow/furnace PUBLISHED

Description (CNA)

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C.

Affected (CNA)

Vendor / product	Versions
tildearrow / furnace	affected 0 before 0.6.8.3

CWE

CWE-787, CWE-120

References

https://github.com/tildearrow/furnace/pull/2471

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.