Integer overflow

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...

CVE-2021-26825

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...

Stack overflow

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash...

UBUNTU-CVE-2021-26825

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...

UBUNTU-CVE-2021-26826

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash...

CVE-2021-26825

CVE-2021-26825 affects Godot Engine up to v3.2. The vulnerability is in ImageLoaderTGA::load_image(), where the buffer_size is computed as (tga_header.image_width * tga_header.image_height) * pixel_size, causing a dynamic stack buffer overflow. Impact: potential code execution and/or crash, with ...

CVE-2021-26825

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...

CVE-2021-26825

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...

CVE-2021-26826

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash...

CVE-2021-26826

CVE-2021-26826 is a stack overflow vulnerability in Godot Engine up to version 3.2, caused by improper boundary checks when loading .TGA image files. Attack vectors can be local or remote; exploitation may lead to code execution and/or a system crash. Several connected advisories confirm the issu...

CVE-2021-26826

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash...

Integer Overflow or Wraparound

An integer overflow issue exists in Godot Engine that can be triggered when loading specially crafted TGA image files...

Out-of-bounds Write

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash...

Godot 缓冲区错误漏洞

Godot is a 2D and 3D cross-platform compatible game engine and is open source software released under the MIT license. A buffer overflow vulnerability exists in Godot 3.2 and earlier versions. The vulnerability stems from improper boundary checking when loading .TGA image files. An attacker could...

PT-2021-17150 · Unknown +3 · Godot Engine +3

Name of the Vulnerable Software and Affected Versions: Godot Engine versions up to v3.2 Description: An integer overflow issue exists in the Godot Engine that can be triggered when loading specially crafted .TGA image files. The issue is located in the ImageLoaderTGA::load image function and lead...

PT-2021-17151 · Unknown +3 · Godot Engine +3

Name of the Vulnerable Software and Affected Versions: Godot Engine versions up to v3.2 Description: A stack overflow issue exists due to improper boundary checks when loading .TGA image files. Depending on the context of the application, the attack vector can be local or remote, and can lead to...

Godot Remote Code Execution Vulnerability

Godot is a cross-platform game engine. The engine supports the creation of 2D and 3D games through a unified interface. A security vulnerability exists in Godot 3.1 and earlier versions, which stems from the program failing to properly apply a deserialization policy. A remote attacker could explo...

DEBIAN-CVE-2019-10069

In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly...

PT-2019-11416 · Godot Engine +1 · Godot +1

Name of the Vulnerable Software and Affected Versions: Godot versions prior to 3.2 Description: The issue allows for remote code execution due to the deserialization policy not being applied correctly. Recommendations: For Godot versions prior to 3.2, update to version 3.2 or later to resolve the...

Fedora 28 : godot (2018-ad83f27a39)

Security update: Godot 3.0.6 This update brings the latest upstream release of Godot Engine, with several bug fixes and improvements applied on top of Godot 3.0.4. This release is compatible with previous Godot 3.0.x versions and should load existing projects without issue. Version 3.0.6 also fix...