Description
Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to corrupt heap memory via an unchecked subsong index in the GROOVES block. Attackers can craft a FamiTracker module with a subsong count of 2 or more to write a groove pattern past the subsong vector, crashing Furnace when opened.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
tildearrow furnace
Default version status: unaffected
0 to ≤ 0.6.8.3affected
pkg:github/tildearrow/furnaceReferences
- https://github.com/tildearrow/furnace/issues/2966 ↗
- https://github.com/tildearrow/furnace ↗
- https://github.com/tildearrow/furnace/commit/c120c72391e3229fe258e5759f43427febcb8693 ↗
- https://github.com/tildearrow/furnace/blob/v0.6.8.3/src/engine/fileOps/ftm.cpp#L1597-L1605 ↗
- https://hackmd.io/@haindpwn/furnace-ftm-import-notemap-and-groove-subsong-oob ↗
- https://www.vulncheck.com/advisories/furnace-through-0.6.8.3-out-of-bounds-write-via-famitracker-grooves-block-import ↗