CVE-2026-4732: Tildearrow Furnace

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Out-of-bounds Read vulnerability in tildearrow furnace (‎extern/libsndfile-modified/src modules). This vulnerability is associated with program files flac.C‎. This issue affects furnace: before 0.7.

Affected products

• Tildearrow Furnace

Published 2026-03-24. Last modified 2026-06-17.