Vendors / tildearrow Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now tildearrow records in CISA KEV No tildearrow vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to corrupt heap memory via an unchecked subsong index in the GROOVES block.
CVSS 4.0 MEDIUM 6.9· Local · No auth · User interaction · EPSS 0.00136 · Published 2026-10-26 · No fix listed CWE-129
Priority MEDIUM 62
A denial of service vulnerability was found in tildearrow Furnace.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01155 · Published 2022-04-10 · No fix listed CWE-404
Priority MEDIUM 62
A vulnerability classified as critical has been found in tildearrow Furnace dev73.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00905 · Published 2022-04-03 · No fix listed CWE-121
Priority MEDIUM 49
Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules).
CVSS 4.0 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00305 · Published 2026-01-27 · Fixed CWE-120
Priority LOW 37
Out-of-bounds Read vulnerability in tildearrow furnace (extern/libsndfile-modified/src modules).
CVSS 4.0 HIGH 8.4· Local · No auth · User interaction · EPSS 0.00122 · Published 2026-03-24 · Fixed CWE-125
Priority LOW 29
Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in src/engine/fileOps/ftm.cpp, triggered by an unbounded DPCM note count during FamiTracker module import.
CVSS 4.0 MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00136 · Published 2026-10-26 · No fix listed CWE-125
Open these records in search → All records by CVSS severity
1 1 4 0 0
THREATIST.IORead the docs