CVE-2026-24823

Critical

Published: 27/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Out-of-bounds write and classic buffer overflow in X-TRACK up to v2.7 in inflate.C (PNGdec). May lead to memory corruption.

Risk Assessment

Risk of system crash or potential code execution via crafted PNG file.

Recommendation

Update X-TRACK to a newer version if available, or avoid processing untrusted PNG files.

Original NVD description (English source)

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in FASTSHIFT X-TRACK (Software/X-Track/USER/App/Utils/lv_img_png/PNGdec/src modules). This vulnerability is associated with program files inflate.C. This issue affects X-TRACK: through v2.7.