CVE-2026-110735

A flaw was found in Godot's binary resource loader. When parsing strings, improper validation allows a negative length value to bypass memory allocation checks, resulting in an out-of-bounds write to the heap during data copying. An attacker could exploit this vulnerability by tricking a user or...