CVE-2021-26826
medium
CVSS v3
—
CVSS v2
—
VIR risk
5.5
Description
A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2021-26826
Vendor advisory: arch — https://security.archlinux.org/ASA-202103-26
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| arch | fixed | 3.2.3-2 | |
| debian | bookworm | affected | |
| debian | bullseye | affected | |
| debian | sid | fixed | 3.5.1-stable-1 |
| debian | trixie | fixed | 3.5.1-stable-1 |
References
Verify integrity in audit chain (admin only). AS-IS.