CVE-2022-1211: Tildearrow Furnace

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the public and may be used.

Affected products

• Tildearrow Furnace: version dev73 only

Published 2022-04-03. Last modified 2026-06-17.