Integer Overflow or Wraparound vulnerability in artraweditor ART (‎rtengine‎ modules). This vulnerability is associated with program files dcraw.C. This issue affects ART: before 1.25.12.

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Passive

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact High

Subsequent System Availability Impact High

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Artraweditor
  • Art

No data.

No data.

References
Link Providers
https://github.com/artraweditor/ART/pull/427 cve-icon cve-icon
History

Tue, 24 Mar 2026 10:45:00 +0000

Type Values Removed Values Added
First Time appeared Artraweditor
Artraweditor art
Vendors & Products Artraweditor
Artraweditor art

Tue, 24 Mar 2026 03:30:00 +0000

Type Values Removed Values Added
Description Integer Overflow or Wraparound vulnerability in artraweditor ART (‎rtengine‎ modules). This vulnerability is associated with program files dcraw.C. This issue affects ART: before 1.25.12.
Title An Integer Overflow Vulnerability in artraweditor/ART
Weaknesses CWE-190
References
Metrics cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/S:N/AU:N/R:U/V:D/RE:L/U:Amber'}
cve-icon MITRE

Status: PUBLISHED

Assigner: GovTech CSG

Published: 2026-03-24T02:44:42.382Z

Updated: 2026-03-24T02:44:42.382Z

Reserved: 2026-03-24T02:43:43.486Z

Link: CVE-2026-4731

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-03-24T04:17:25.380

Modified: 2026-03-24T04:17:25.380

Link: CVE-2026-4731

cve-icon Redhat

No data.