VDB
CVE-2021-26826
CVE-2021-26826
PUBLISHED
A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
EPSS 0.65% · 71.2th percentile
Risk Scores
EPSS Score
0.65%
71.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:Pro:20.04:LTS | godot | 0, 3.0.6-2build2, 3.2-stable-2 |
| Ubuntu:Pro:22.04:LTS | godot | 0, 3.2.3-stable-1, 3.2.3-stable-1build2 |
Exploit Intelligence
Timeline
- Feb 8, 2021 CVE Published
- Feb 11, 2021 CVE Updated
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2021-26826 third-party-advisory
- https://github.com/godotengine/godot/pull/45701 third-party-advisory
- https://github.com/godotengine/godot/commit/403e4fd08b0b212e96f53d926e6273e0745eaa5a third-party-advisory
- https://github.com/godotengine/godot/pull/45701/commits/403e4fd08b0b212e96f53d926e6273e0745eaa5a third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2021-26826 third-party-advisory
- https://ubuntu.com/security/notices/USN-7579-1 vendor-advisory