Vendors / godotengine Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now godotengine records in CISA KEV No godotengine vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message).
CVSS 3.1 LOW 3.6· Local · No auth · User interaction · EPSS 0.00205 · Published 2026-10-14 · No fix listed CWE-1285
Priority MEDIUM 48
In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03443 · Published 2019-05-31 · No fix listed CWE-502
Priority LOW 39
Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03785 · Published 2018-08-20 · No fix listed CWE-131
Priority LOW 37
A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01598 · Published 2021-02-08 · No fix listed CWE-787
Priority LOW 37
An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01598 · Published 2021-02-08 · No fix listed CWE-190
Priority LOW 12
Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string).
CVSS 3.1 LOW 2.5· Local · No auth · User interaction · EPSS 0.00155 · Published 2026-10-14 · No fix listed CWE-195
Priority LOW 12
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp).
CVSS 3.1 LOW 2.5· Local · No auth · User interaction · EPSS 0.00156 · Published 2026-10-14 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
1 3 0 3 0
THREATIST.IORead the docs