CVE-2026-24800

10.0

Critical

Published:27 Jan 2026

Last updated:17 Jun 2026

Source:cve_disclosure@tech.gov.sg

Deferred

Weakness (CWE)

CWE-120Buffer Copy without Checking Size
CWE-787Out-of-bounds Write

CVSS Vector

v4.0

Attack Vector: Network
Attack Complexity: Low
Attack Requirements: None
Privileges Required: None
User Interaction: None
Confidentiality (Vulnerable): High
Integrity (Vulnerable): High
Availability (Vulnerable): High
Confidentiality (Subsequent): High
Integrity (Subsequent): High
Availability (Subsequent): High

View on MITRE Find PoC on GitHub

Description

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C.

References

cve_disclosure@tech.gov.sg

https://github.com/tildearrow/furnace/pull/2471