CVE-2026-4746 Heap Buffer Over-Write Vulenrabilty in timeplus-io/proton

🗓️ 24 Mar 2026 03:28:20Reported by GovTech CSGType

Out-of-bounds heap write in timeplus io proton inflate C, affecting proton before version 1.6.16.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-4746	24 Mar 202603:28	–	attackerkb
CBLMariner	CVE-2026-4746 affecting package cloud-hypervisor for versions less than 32.0-6	14 Mar 202500:26	–	cbl_mariner
Circl	CVE-2026-4746	24 Mar 202606:00	–	circl
CNNVD	Proton 安全漏洞	24 Mar 202600:00	–	cnnvd
CVE	CVE-2026-4746	24 Mar 202603:28	–	cve
EUVD	EUVD-2026-14745	24 Mar 202606:31	–	euvd
NVD	CVE-2026-4746	24 Mar 202605:16	–	nvd
Positive Technologies	PT-2026-27326	24 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-4746	26 Mar 202614:59	–	redhatcve
Vulnrichment	CVE-2026-4746 Heap Buffer Over-Write Vulenrabilty in timeplus-io/proton	24 Mar 202603:28	–	vulnrichment

[
  {
    "vendor": "timeplus-io",
    "product": "proton",
    "collectionURL": "https://github.com/timeplus-io/proton",
    "modules": [
      "base/poco/Foundation/src‎"
    ],
    "programFiles": [
      "inflate.c"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.6.16",
        "versionType": "git"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
github	www.github.com/timeplus-io/proton/pull/943

24 Mar 2026 03:28Current

CVSS 410

EPSS0.00063

CWE-787

out of bounds heap write timeplus io proton inflate C version 1.6.16