tildearrow Furnace input validation error vulnerability

Version 0.6.8.3 and earlier of tildearrow Furnace contain an input validation error vulnerability. This flaw arises from a lack of checks on sub-song indices within GROOVES blocks in DivEngine::loadFTM, resulting in out-of-bounds writes and heap memory corruption. An attacker can craft FamiTracke...