Godot 4.x Radiance HDR loader heap write fix merged
Pull request 124697 rejects bad image sizes and bounds RLE runs; its body cites CVE-2026-110734.
3 stories, newest first · one card per story
Pull request 124697 rejects bad image sizes and bounds RLE runs; its body cites CVE-2026-110734.
Disputed CVE-2026-110735 covers a Godot 4.x heap out-of-bounds write scored CVSS 2.5.
Unpatched Godot 4.x heap out-of-bounds read affects OptimizedTranslation parsing of untrusted files.
Today 2.2K readers · 2.7K views · 404 reads · all time 108K views