https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-30T08:17:44.214394+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-116730 CVE-2026-116730 — Furnace through 0.6.8.3 Out-of-Bounds Read via FamiTracker Module Import 2026-10-30T08:17:44.215511+00:00

Affected: tildearrow furnace

Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in src/engine/fileOps/ftm.cpp, triggered by an unbounded DPCM note count during FamiTracker module import. Attackers can craft a .ftm, .dnm or 0CC/E-FamiTracker module with a 2A03 instrument note count above 120 to read past the noteMap array and crash Furnace when opened.