CVE-2026-24823: Fastshift X-Track

Critical severity, CVSS 10.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in FASTSHIFT X-TRACK (Software/X-Track/USER/App/Utils/lv_img_png/PNGdec/src modules). This vulnerability is associated with program files inflate.C. This issue affects X-TRACK: through v2.7.

Affected products

• Fastshift X-Track

Published 2026-01-27. Last modified 2026-06-17.