PT-2026-27309 · Art · Art

Titan Team · Publicado 2026-03-24 · Atualizado 2026-04-30 · CVE-2026-4731

Positive Technologies (AI Summary)

CVSS v4.0

8.5

Alta

Vetor base

AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/S:N/AU:N/R:U/V:D/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions ART versions prior to 1.25.12

Description An integer overflow or wraparound issue exists in the ART raw image editor’s rtengine modules, specifically related to the dcraw.C program file. This can potentially lead to unexpected behavior or crashes.

Recommendations Update to version 1.25.12 or later.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2026-4731

Produtos afetados

Art

Referências · 4

• https://github.com/artraweditor/ART/pull/427 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-4731 · Nota de Segurança
• https://twitter.com/CVEarity/status/2036847440528367908 · Publicação no Twitter
• https://t.me/cveNotify/161573 · Publicação no Telegram