CVE-2026-24872

Critical · 9.8

CVSS

9.8

EPSS

0.3%

Published

Jan 27, 2026

CISA due date

—

The record

improper pointer arithmetic vulnerability in ProjectSkyfire SkyFire_548.This issue affects SkyFire_548: before 5.4.8-stable5.

Ecosystem	Package	Introduced	Fixed