CVE-2022-1211

A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the public and may be used.

• CWE-121
• CWE-787

• https://drive.google.com/file/d/1h111beVcWG8F99jRffO7_HKYEhm7Qgvb/view?usp=sharingThird Party Advisory
• https://github.com/tildearrow/furnace/issues/325Exploit, Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?id.196371Permissions Required, Third Party Advisory
• https://drive.google.com/file/d/1h111beVcWG8F99jRffO7_HKYEhm7Qgvb/view?usp=sharingThird Party Advisory
• https://github.com/tildearrow/furnace/issues/325Exploit, Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?id.196371Permissions Required, Third Party Advisory

Published

Apr 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1205A NULL pointer dereference flaw was found in the Linux kerne…4.7
• CVE-2022-1206The AdRotate Banner Manager – The only ad manager you'll nee…7.2
• CVE-2022-1207Out-of-bounds read in GitHub repository radareorg/radare2 pr…6.6
• CVE-2022-1208The Ultimate Member plugin for WordPress is vulnerable to St…5.4
• CVE-2022-1209The Ultimate Member plugin for WordPress is vulnerable to ar…5.4
• CVE-2022-1210A vulnerability classified as problematic was found in LibTI…6.5
• CVE-2022-1212Use-After-Free in str_escape in mruby/mruby in GitHub reposi…9.8
• CVE-2022-1213SSRF filter bypass port 80, 433 in GitHub repository livehel…8.1
• CVE-2022-1214Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2022-1215A format string vulnerability was found in libinput7.8
• CVE-2022-1216The Advanced Image Sitemap WordPress plugin through 1.2 does…6.1
• CVE-2022-1217The Custom TinyMCE Shortcode Button WordPress plugin through…6.1