CVE-2021-26825: Buffer Overflow
An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage() function at line: const sizet buffersize = (tgaheader.imagewidth tgaheader.imageheight) pixelsize; The bug leads to Dynamic stack buffer overflow. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-26825.
What is the severity of CVE-2021-26825?
The severity of CVE-2021-26825 is high.
What is affected by CVE-2021-26825?
Godot Engine up to v3.2 is affected by CVE-2021-26825.
How can CVE-2021-26825 be triggered?
CVE-2021-26825 can be triggered when loading specially crafted.TGA image files.
Is there a fix available for CVE-2021-26825?
Yes, a fix for CVE-2021-26825 is available in the Godot Engine GitHub repository.