CVE-2021-26826 describes a stack overflow vulnerability in Godot Engine versions up to 3.2, stemming from insufficient boundary checks during .TGA image file loading. This flaw carries a high CVSS score of 7.8, indicating a potentially severe impact ranging from system crashes to arbitrary code execution, with an attack vector that can be local or remote and requires user interaction. While the vulnerability is significant, there is currently no evidence of active exploitation, public exploit code, or notable community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.2CPE matchmatch criteria | cpe:2.3:a:godotengine:godot_engine:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.