Out-of-Bounds Read Vulnerability in Tildearrow Furnace Affecting Specific Versions
CVE-2026-4732

8.4HIGH

Key Information:

Vendor

Tildearrow

Status
Furnace
Vendor
CVE Published:
24 March 2026

What is CVE-2026-4732?

An out-of-bounds read vulnerability has been identified in Tildearrow’s Furnace, specifically affecting the program files associated with flac.C. This vulnerability allows attackers to access memory locations that are outside the intended scope, potentially leading to information disclosure and stability issues within the affected application. The vulnerability is present in versions prior to 0.7, and users are encouraged to review the patch available at the referenced GitHub link to mitigate any associated risks.

Affected Version(s)

furnace 0

References

https://github.com/tildearrow/furnace/pull/2812
patch

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

TITAN Team (titancaproject@gmail.com)
.