PT-2026-27309 · Art · Art

Titan Team · CVE-2026-4731 · Published 2026-03-24 · Updated 2026-04-30

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions ART versions prior to 1.25.12

Description An integer overflow or wraparound issue exists in the ART raw image editor’s rtengine modules, specifically related to the dcraw.C program file. This can potentially lead to unexpected behavior or crashes.

Recommendations Update to version 1.25.12 or later.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2026-4731

Affected Products

Art

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4731.json · Exploit
• https://github.com/artraweditor/ART/pull/427 · Patch
• https://osv.dev/vulnerability/CVE-2026-4731 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4731 · Security Note
• https://github.com/artraweditor/ART · Note
• https://t.me/cveNotify/161573 · Telegram Post
• https://twitter.com/CVEarity/status/2036847440528367908 · Twitter Post