CVE-2026-4732

High

Published: 24/03/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Out-of-bounds Read vulnerability in tildearrow furnace (extern/libsndfile-modified/src modules), associated with flac.C.

Risk Assessment

May lead to information disclosure or program crash when processing specially crafted FLAC files.

Recommendation

Update furnace to version 0.7 or later.

Other vulnerabilities in furnace

CVE-2026-24800Critical
Classic buffer overflow (out-of-bounds write) vulnerability in the furnace project (zlib modules) related to inflate.C files.

Original NVD description (English source)

Out-of-bounds Read vulnerability in tildearrow furnace (‎extern/libsndfile-modified/src modules). This vulnerability is associated with program files flac.C‎. This issue affects furnace: before 0.7.