Re: Godot 4.x: heap out-of-bounds write via negative string length in binary resource loader
Disputed CVE-2026-110735 covers a Godot 4.x heap out-of-bounds write scored CVSS 2.5.
28
Disputed CVE-2026-110735 covers a Godot 4.x heap out-of-bounds write scored CVSS 2.5.
Disputed CVE-2026-110736 covers a Godot 4.x heap out-of-bounds read scored CVSS 3.6.
Unpatched Godot 4.x heap out-of-bounds read affects OptimizedTranslation parsing of untrusted files.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 2.3K readers · 2.8K views · 411 reads · all time 108K views