4 matches found
CVE-2026-110734
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR .hdr image decoder modules/hdr/imageloaderhdr.cpp. The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the image dimensions, without validating that an instruction's...
CVE-2026-110734
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR .hdr image decoder modules/hdr/imageloaderhdr.cpp. The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the image dimensions, without validating that an instruction's...
CVE-2026-110734
The Godot Engine through version 4.7.2 is vulnerable to a heap out-of-bounds write within the Radiance HDR (.hdr) image decoder (specifically in modules/hdr/image_loader_hdr.cpp). The root cause is a lack of validation in the run-length decoding loop, where RLE instructions are expanded into a bu...
EUVD-2026-101301
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR .hdr image decoder modules/hdr/imageloaderhdr.cpp. The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the image dimensions, without validating that an instruction's...