Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitylow

Re: Godot 4.x: heap out-of-bounds read in OptimizedTranslation message lookup

oss-security ()1
Read at seclists.org
Part of a story covered by 3 sourcesRe: Godot 4.x: heap out-of-bounds write in Radiance HDR image loaderMerged summary & timeline
AI summary · grok-4.7-buildSummaries by Vani AI

Disputed CVE-2026-110736 covers a Godot 4.x heap out-of-bounds read scored CVSS 3.6.

A follow-up reports that CVE-2026-110736 was assigned for a heap out-of-bounds read in Godot 4.x OptimizedTranslation message lookup. The record is tagged disputed and cites the supplier's position that there are no security issues. MITRE scored it CVSS 3.1 3.6, with local access, high complexity, user interaction, and low confidentiality and availability impact. The reporter asked MITRE's CNA-LR to reconsider that assessment.

Key facts
  • CVE-2026-110736 covers a heap out-of-bounds read in Godot 4.x.
  • The bug is in OptimizedTranslation message lookup.
  • MITRE scored it CVSS 3.6 and marked the record disputed.
  • The reporter requested reconsideration from MITRE's CNA of Last Resort.
Analyze CVE-2026-110736 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-110736
Tags
godotcve-2026-110736out-of-bounds-readdisputed-cvegame-engine
Vendors
Godot
Products
Godot
Organizations
MITRE

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-110736
Heap out-of-bounds read in Godot Engine translation loader
3.6—

From the original article

Posted by Tomasz Kaye on Oct 15 Follow-up: a CVE identifier has been assigned for this issue. https://www. cve.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.