CVE-2022-1211

    Dashboard / Vulnerabilities / CVE-2022-1211

    CVE-2022-1211

    Published: 3 Apr 2022Last Modified: 12 Aug 2026

    Summary: tildearrow Furnace FUR to VGM Converter stack-based overflow

    Details: A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the public and may be used.

    References: https://drive.google.com/file/d/1h111beVcWG8F99jRffO7_HKYEhm7Qgvb/view?usp=sharing, https://vuldb.com/?id.196371, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1211.json, https://nvd.nist.gov/vuln/detail/CVE-2022-1211, https://github.com/tildearrow/furnace/issues/325

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 075f758e4dd65d7886d8e5f363cd7a05dfd49231
    Fixed -None

    Affected versions

    dev73

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-1211 | CVE-DB