Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-4746 EUVD-2026-14745GHSA-ch4h-8w5c-3g8g

Heap Buffer Over-Write Vulenrabilty in timeplus-io/proton

Published Mar 24, 2026 · Updated Mar 24, 2026 · Assigned by GovTech CSG

Description

Out-of-bounds Write vulnerability in timeplus-io proton (base/poco/Foundation/src‎ modules). This vulnerability is associated with program files inflate.C.

This issue affects proton: before 1.6.16.

Affected products

VendorProductAffectedFixed
timeplus-io proton — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 fltk +1 No fix yet —

References