CVE-2021-26826

2021-02-0815:15:12

Google

osv.dev

godot engine

stack overflow

boundary checks

.tga image files

code execution

system crash

remote attack vector

local attack vector

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

62.1%

JSON

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.