VDB
CVE-2021-26825
CVE-2021-26825
PUBLISHED
CVSS 7.800000190734863 HIGH
An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::load_image() function at line: const size_t buffer_size = (tga_header.image_width * tga_header.image_height) * pixel_size; The bug leads to Dynamic stack buffer overflow. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
EPSS 1.53% · 72.5th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
1.53%
72.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:Pro:20.04:LTS | godot | 0, 3.0.6-2build1, 3.0.6-2build2 |
| Ubuntu:Pro:22.04:LTS | godot | 0, 3.2.3-stable-1build1, 3.2.3-stable-1build2 |
Timeline
- Feb 8, 2021 CVE Published
- Feb 11, 2021 CVE Updated
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 28, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Jul 4, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 7, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2021-26825 third-party-advisory
- https://github.com/godotengine/godot/pull/45702 third-party-advisory
- https://github.com/godotengine/godot/commit/113b5ab1c45c01b8e6d54d13ac8876d091f883a8 third-party-advisory
- https://github.com/godotengine/godot/pull/45702/files third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2021-26825 third-party-advisory
- https://ubuntu.com/security/notices/USN-7579-1 vendor-advisory