Approved changes feed: RSS · Atom

cpe:2.3:a:godotengine:godot_engine:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGodotengine (ec45a54f-248b-5715-99ed-562ec41d2c5f)
ProductGodot Engine (8d0839dd-87a9-5b19-bd72-99ff099d561a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/godot purl2cpe 2026-06-01 10:14:41.545532
pkg:deb/ubuntu/godot purl2cpe 2026-06-01 10:14:41.545535
pkg:github/godotengine/godot purl2cpe 2026-06-01 10:14:41.545538
pkg:gitlab/sthagen/godot purl2cpe 2026-06-01 10:14:41.545541
pkg:rpm/fedora/godot purl2cpe 2026-06-01 10:14:41.545544
pkg:sourceforge/godot-engine.mirror purl2cpe 2026-06-01 10:14:41.545547

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-26826 vulnerable 2026-06-08 05:30:45.258357 Details available
A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
Published: 2021-02-08T14:55:24.000Z
Updated: 2024-08-03T20:33:40.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26825 vulnerable 2026-06-08 05:30:45.257822 Details available
An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::load_image() function at line: const size_t buffer_size = (tga_header.image_width * tga_header.image_height) * pixel_size; The bug leads to Dynamic stack buffer overflow. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
Published: 2021-02-08T14:58:40.000Z
Updated: 2024-08-03T20:33:41.378Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.