CVE-2026-24823 — A heap-based buffer over-read or buffer overflow vulnerability in FASTSHIFT/X-TRACK

CVE-2026-24823

A heap-based buffer over-read or buffer overflow vulnerability in FASTSHIFT/X-TRACK PUBLISHED

Description (CNA)

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in FASTSHIFT X-TRACK (Software/X-Track/USER/App/Utils/lv_img_png/PNGdec/src modules). This vulnerability is associated with program files inflate.C. This issue affects X-TRACK: through v2.7.

Affected (CNA)

Vendor / product	Versions
FASTSHIFT / X-TRACK	affected 0 through v2.7

CWE

CWE-787, CWE-120

References

https://github.com/FASTSHIFT/X-TRACK/pull/120

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.