CVE-2026-1465CWE-119

A heap-based buffer over-read or buffer overflow in tildearrow/furnace

High · published January 27, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
3.0
In the wild
Unconfirmed
What it is

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in anyrtcIO-Community anyRTC-RTMP-OpenSource (third_party/faad2-2.7/libfaad modules). This vulnerability is associated with program files bits.C, syntax.C.

This issue affects anyRTC-RTMP-OpenSource: before 1.0.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/V:D/RE:L/U:Amber
EPSS
0.00140 · 3.0th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2026-01-27T08:15Z
EPSS history
Timeline
  • 27 JAN 08:15Z
    A heap-based buffer over-read or buffer overflow in tildearrow/furnace
    cvelistv5