CVE-2026-4746

Critical

Published: 24/03/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

An Out-of-bounds Write vulnerability in proton (base/poco/Foundation/src modules) associated with the inflate.C file. This issue affects proton before version 1.6.16.

Risk Assessment

Out-of-bounds write can lead to program crash or remote code execution, posing a serious risk to system integrity.

Recommendation

Update proton to version 1.6.16 or later, which includes the fix.

Original NVD description (English source)

Out-of-bounds Write vulnerability in timeplus-io proton (base/poco/Foundation/src‎ modules). This vulnerability is associated with program files inflate.C. This issue affects proton: before 1.6.16.