CVE-2026-24800

Critical

Published: 27/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Classic buffer overflow (out-of-bounds write) vulnerability in the furnace project (zlib modules) related to inflate.C files.

Risk Assessment

An attacker could exploit the buffer overflow to execute code or cause a crash.

Recommendation

Update furnace to a version that includes a fix for this vulnerability.

Original NVD description (English source)

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C.