CVE-2021-26825

CVE-2021-26825 affects Godot Engine up to v3.2. The vulnerability is in ImageLoaderTGA::load_image(), where the buffer_size is computed as (tga_header.image_width * tga_header.image_height) * pixel_size, causing a dynamic stack buffer overflow. Impact: potential code execution and/or crash, with ...

CVE-2021-26826

CVE-2021-26826 is a stack overflow vulnerability in Godot Engine up to version 3.2, caused by improper boundary checks when loading .TGA image files. Attack vectors can be local or remote; exploitation may lead to code execution and/or a system crash. Several connected advisories confirm the issu...