Panda3D

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Panda3D records in CISA KEV

No Panda3D vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cyrus Imap Server 4 records MEDIUM Panda3d 3 records MEDIUM Cveclient 2 records LOW Bootpd 1 record MEDIUM Carnegie Mellon Silicon Valley 1 record LOW Cyrus-sasl 1 record LOW Dbd 1 record MEDIUM Flite 1 record LOW

Records

3 records in Panda3d · all components

TI-2026-17799 CVE-2026-22189 · GHSA-gwg6-62mc-7h63

Panda3D <= 1.10.16 egg-mkfont Stack Buffer Overflow

MEDIUM 64

The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains a stack-based buffer overflow vulnerability due to use of an unbounded sprintf() call with attacker-controlled input.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00519 Published 2026-01-07 No fix listed CWE-121

TI-2026-17798 CVE-2026-22188 · GHSA-xvxx-4fr3-55xv

Panda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca()

MEDIUM 64

The deploy-stub component in Panda3D versions up to and including 1.10.16 contains a denial of service vulnerability due to unbounded stack allocation.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00208 Published 2026-01-07 No fix listed CWE-457

TI-2026-17800 CVE-2026-22190 · GHSA-mmrr-c2j6-cqfp

Panda3D <= 1.10.16 egg-mkfont Format String Information Disclosure

MEDIUM 56

The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains an uncontrolled format string vulnerability.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.0037 Published 2026-01-07 No fix listed CWE-134

Open these records in search →

Critical	2
High	4
Medium	9
Low	1
No CVSS	0