CVE-2026-116731

A flaw was found in Furnace. The application does not properly validate subsong indices when parsing FamiTracker module files, leading to an out-of-bounds write. By convincing a user to open a specially crafted file, an attacker can corrupt memory and cause the application to crash, resulting in ...