These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability in Furnace through 0.6.8.3 allows for an out-of-bounds write via the FamiTracker GROOVES block import. This occurs in the DivEngine::loadFTM() function, where an unchecked subsong index can lead to heap memory corruption. An attacker can exploit this by crafting a FamiTracker module with a subsong count of 2 or more, causing Furnace to crash when the module is opened.
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-26T21:52:32.251Z and has not been modified since then. Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in src/engine/fileOps/ftm.cpp, triggered by an unbounded DPCM note count during FamiTracker module import. This vulnerability allows for a crash wh [truncated]