Skip to content
OpenAdvisories

Package · Debian

furnace

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-116730

    Furnace through 0.6.8.3 Out-of-Bounds Read via FamiTracker Module Import

    Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in src/engine/fileOps/ftm.cpp, triggered by an unbounded DPCM note count during FamiTracker module import. Attackers can craft a .ftm, .dnm or 0CC/E-FamiTracker …

    tildearrow furnace furnace furnace Debian Ubuntu
  • Medium 6.1
    CVE-2026-116731

    Furnace through 0.6.8.3 Out-of-Bounds Write via FamiTracker GROOVES Block Import

    Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to corrupt heap memory via an unchecked subsong index in the GROOVES block. Attackers can craft a FamiTracker module with a subsong count of 2 …

    tildearrow furnace furnace furnace Debian Ubuntu