GO
Vendor
godotengine
7
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110736 | GE Godot Engine godotengine | 3.6 | Oct 14 | Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message) |
| CVE-2026-110735 | GE Godot Engine godotengine | 2.5 | Oct 14 | Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string) |
| CVE-2026-110734 | GE Godot Engine godotengine | 2.5 | Oct 14 | Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp) |
| CVE-2021-26826 | GE Godot Engine Godotengine | 7.8 | Feb 8 | A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files |
| CVE-2021-26825 | GE Godot Engine Godotengine | 7.8 | Feb 8 | An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files |
| CVE-2019-10069 | GO Godot Godotengine | 9.8 | May 31 | In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly |
| CVE-2018-1000224 | GO Godot Godotengine | 7.5 | Aug 20 | Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6 |