{"id":"CVE-2026-24800","summary":"A heap-based buffer over-read or buffer overflow in tildearrow/furnace","details":"Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C.","modified":"2026-07-15T16:34:17.294942Z","published":"2026-01-27T08:33:16.882Z","database_specific":{"cna_assigner":"GovTech CSG","cwe_ids":["CWE-120","CWE-787"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24800.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24800.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24800"},{"type":"FIX","url":"https://github.com/tildearrow/furnace/pull/2471"},{"type":"PACKAGE","url":"https://github.com/tildearrow/furnace"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tildearrow/furnace","events":[{"introduced":"0"},{"fixed":"f2619dbd988c92bf9c7173648d191648f60aecbf"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"0.6.8.3"}],"source":"AFFECTED_FIELD"}}],"versions":["v0.6.8.2","v0.6.8.1","v0.6.8","v0.6.8pre2","v0.6.8pre1","dev224","dev193","v0.6.1","dev191","dev190","dev189","dev188","dev187","dev186","dev185","dev184","dev183","dev182","v0.6pre14","v0.6","v0.6pre18","v0.6pre17","v0.6pre16","v0.6pre15","dev176","v0.6pre13","v0.6pre12","v0.6pre11","v0.6pre10","dev170","v0.6pre9","dev168","dev167","v0.6pre8","dev165","dev164","dev163","v0.6pre7","v0.6pre6","dev159","v0.6pre5","dev157","dev156","dev155","dev154","dev152","dev151","dev150","dev149","dev148","dev147","pro","dev145","v0.6pre4","dev142","te","dev140","dev139","dev138","dev137","dev136","v0.6pre3","v0.6pre2","dev131","dev130","dev129","dev128","dev127","dev126","dev125","dev124","dev123","dev121","dev120","dev119","dev118","dev117","v0.6pre1.5","dev115","dev114","dev113","dev112","dev111","dev110","dev109","dev108","dev107","dev106","dev105","dev104","dev103","dev102","dev101","v0.6pre1","dev99","dev98","dev97","dev96","dev95","dev94","dev93","dev92","dev91","dev90","dev89","dev88","dev87","dev86","dev85","dev84","dev83","dev82","dev81","dev80","dev79","dev78","dev77","dev76","dev75","v0.6pre0","dev73","dev72","dev71","dev70","dev69","dev68","dev67","dev66","dev65","dev64","dev63","dev62","v0.5.7","v0.5.7pre4","v0.5.6","v0.5.5","v0.5.4","v0.5.3","v0.5.2","v0.5.1","v0.5","v0.4.6","v0.4.5-real","v0.4.5","v0.4.4","v0.4.3","v0.4.2","v0.4.1","v0.4","v0.3.1","v0.3","v0.2.2","v0.2.1","v0.2","dev10","dev9","dev8","dev7","dev6","dev5"],"database_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/tildearrow/furnace/commit/f2619dbd988c92bf9c7173648d191648f60aecbf","target":{"file":"src/gui/xyOsc.cpp"},"deprecated":false,"digest":{"line_hashes":["28637327419295158186997781051499130989"],"threshold":0.9},"id":"CVE-2026-24800-c86d998d"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-24800.json","vanir_signatures_modified":"2026-07-15T16:34:17Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/V:D/RE:L/U:Red"}]}