Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitylow

Re: Godot 4.x: heap out-of-bounds write in Radiance HDR image loader

oss-security ()1 · 1 read
Read at seclists.org
Part of a story covered by 3 sourcesRe: Godot 4.x: heap out-of-bounds write in Radiance HDR image loaderMerged summary & timeline
AI summary · grok-4.7-buildSummaries by Vani AI

Godot 4.x Radiance HDR loader flaw CVE-2026-110734 is disputed and scored CVSS 2.5.

A follow-up on the oss-security list says CVE-2026-110734 was assigned for a heap out-of-bounds write in the Godot 4.x Radiance HDR image loader. MITRE tagged the record disputed and included the supplier's position that there are no security issues. The published CVSS 3.1 score is 2.5 (AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N). The reporter filed a reconsideration request with MITRE's CVE Numbering Authority of Last Resort. No exploitation is reported.

Key facts
  • CVE-2026-110734 covers a heap out-of-bounds write in Godot 4.x's Radiance HDR loader.
  • MITRE marked the record disputed and quoted the supplier saying there are no security issues.
  • Published CVSS 3.1 is 2.5: local, high complexity, user interaction, low integrity only.
  • The reporter asked MITRE's CNA of last resort to reconsider the record.
Analyze CVE-2026-110734 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-110734
Tags
godotcve-2026-110734heap-overflowhdrimage-loaderdisputed-cve
Products
Godot
Organizations
MITREGodot

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-110734
Heap out-of-bounds write in Godot Engine HDR loader
2.5—

From the original article

Posted by Tomasz Kaye on Oct 15 Follow-up: a CVE identifier has been assigned for this issue. https://www. cve.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.