Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-24823 EUVD-2026-4804GHSA-mvcg-wp8g-8fcv

A heap-based buffer over-read or buffer overflow vulnerability in FASTSHIFT/X-TRACK

Published Jan 27, 2026 · Updated Jan 27, 2026 · Assigned by GovTech CSG

Description

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in FASTSHIFT X-TRACK (Software/X-Track/USER/App/Utils/lv_img_png/PNGdec/src modules). This vulnerability is associated with program files inflate.C.

This issue affects X-TRACK: through v2.7.

Affected products

VendorProductAffectedFixed
FASTSHIFT X-TRACK — —

References