CVE-2026-24800

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-24800
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-24800.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-24800
Downstream
Published
2026-01-27T08:33:16.882Z
Modified
2026-07-15T16:34:17.294942Z
Severity
  • 10.0 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/V:D/RE:L/U:Red CVSS Calculator
Summary
A heap-based buffer over-read or buffer overflow in tildearrow/furnace
Details

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24800.json",
    "cwe_ids": [
        "CWE-120",
        "CWE-787"
    ],
    "cna_assigner": "GovTech CSG"
}
References

Affected packages

Git / github.com/tildearrow/furnace

Affected ranges

Type
GIT
Repo
https://github.com/tildearrow/furnace
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f2619dbd988c92bf9c7173648d191648f60aecbf
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.6.8.3"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

Other
dev10
dev101
dev102
dev103
dev104
dev105
dev106
dev107
dev108
dev109
dev110
dev111
dev112
dev113
dev114
dev115
dev117
dev118
dev119
dev120
dev121
dev123
dev124
dev125
dev126
dev127
dev128
dev129
dev130
dev131
dev136
dev137
dev138
dev139
dev140
dev142
dev145
dev147
dev148
dev149
dev150
dev151
dev152
dev154
dev155
dev156
dev157
dev159
dev163
dev164
dev165
dev167
dev168
dev170
dev176
dev182
dev183
dev184
dev185
dev186
dev187
dev188
dev189
dev190
dev191
dev193
dev224
dev5
dev6
dev62
dev63
dev64
dev65
dev66
dev67
dev68
dev69
dev7
dev70
dev71
dev72
dev73
dev75
dev76
dev77
dev78
dev79
dev8
dev80
dev81
dev82
dev83
dev84
dev85
dev86
dev87
dev88
dev89
dev9
dev90
dev91
dev92
dev93
dev94
dev95
dev96
dev97
dev98
dev99
pro
te
v0.*
v0.2
v0.2.1
v0.2.2
v0.3
v0.3.1
v0.4
v0.4.1
v0.4.2
v0.4.3
v0.4.4
v0.4.5
v0.4.5-real
v0.4.6
v0.5
v0.5.1
v0.5.2
v0.5.3
v0.5.4
v0.5.5
v0.5.6
v0.5.7
v0.5.7pre4
v0.6
v0.6.1
v0.6.8
v0.6.8.1
v0.6.8.2
v0.6.8pre1
v0.6.8pre2
v0.6pre0
v0.6pre1
v0.6pre1.5
v0.6pre10
v0.6pre11
v0.6pre12
v0.6pre13
v0.6pre14
v0.6pre15
v0.6pre16
v0.6pre17
v0.6pre18
v0.6pre2
v0.6pre3
v0.6pre4
v0.6pre5
v0.6pre6
v0.6pre7
v0.6pre8
v0.6pre9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-24800.json"
vanir_signatures_modified 
"2026-07-15T16:34:17Z"
vanir_signatures 
[
    {
        "digest": {
            "line_hashes": [
                "28637327419295158186997781051499130989"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-24800-c86d998d",
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/tildearrow/furnace/commit/f2619dbd988c92bf9c7173648d191648f60aecbf",
        "signature_type": "Line",
        "target": {
            "file": "src/gui/xyOsc.cpp"
        }
    }
]