PatchTheCVEgodotengine vulnerabilities
Recent CVEs affecting godotengine products. 4 tracked.
godotengine has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2021-02-08. Highest priority: CVE-2019-10069 (score 62/100).
- CVE-2021-26826 HIGH 7.8 UPGRADE A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loadin
- CVE-2021-26825 HIGH 7.8 UPGRADE An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially craft
- CVE-2019-10069 CRITICAL 9.8 UPGRADE In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied co
- CVE-2018-1000224 HIGH 7.5 UPGRADE Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6
FAQ
How do I fix godotengine vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is godotengine being exploited right now?
None of the tracked godotengine CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which godotengine CVE should I patch first?
CVE-2019-10069 currently ranks highest (62/100): In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied co.