tildearrow/furnace
GitHub
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| — | — | — | ||
Out-of-bounds Read vulnerability in tildearrow furnace (extern/libsndfile-modified/src modules). This vulnerability is associated with program files flac.C. This issue affects furnace: before 0.7. | ||||
| — | — | — | ||
Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C. | ||||
| = *, = dev73, all versions, = 0.2, = 0.2.1, = 0.2.2, = 0.3, = 0.3.1, = 0.4, = 0.4.1, = 0.4.2, = 0.4.3, = 0.4.4, = 0.4.5, = 0.4.6, = 0.4.7, = 0.5, = 0.5.1, = 0.5.2, = 0.5.3, = 0.5.4, = 0.5.5, = 0.5.6, = 0.6, = 0.5.7, = 0.5.8, = dev5, = dev6, = dev7, = dev8, = dev9, = dev10, = dev62, = dev63, = dev64, = dev65, = dev66, = dev67, = dev68, = dev69, = dev70, = dev71, = dev72, = dev75, = dev76, = dev77, = dev78, = dev79, = dev80 | 4.3 MEDIUM | 4.3 MEDIUM | ||
A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch 0eb02422d5161767e9983bdaa5c429762d3477ce. | ||||
| = dev73 | 6.3 MEDIUM | 4.3 MEDIUM | ||
A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the public and may be used. | ||||