Vulnerabilities

TI-2026-17798 CVE-2026-22188 · GHSA-xvxx-4fr3-55xv

Panda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca()

MEDIUM 64

The deploy-stub component in Panda3D versions up to and including 1.10.16 contains a denial of service vulnerability due to unbounded stack allocation.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00208 Published 2026-01-07 No fix listed CWE-457

TI-2026-17800 CVE-2026-22190 · GHSA-mmrr-c2j6-cqfp

Panda3D <= 1.10.16 egg-mkfont Format String Information Disclosure

MEDIUM 56

The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains an uncontrolled format string vulnerability.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.0037 Published 2026-01-07 No fix listed CWE-134

TI-2026-17799 CVE-2026-22189 · GHSA-gwg6-62mc-7h63

Panda3D <= 1.10.16 egg-mkfont Stack Buffer Overflow

MEDIUM 64

The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains a stack-based buffer overflow vulnerability due to use of an unbounded sprintf() call with attacker-controlled input.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00519 Published 2026-01-07 No fix listed CWE-121

Vulnerabilities

Filters

Panda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca()

Panda3D <= 1.10.16 egg-mkfont Format String Information Disclosure

Panda3D <= 1.10.16 egg-mkfont Stack Buffer Overflow