CVE-2021-26826: Godotengine Godot Engine

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.

Affected products

• Godotengine Godot Engine: up to and including 3.2

Published 2021-02-08. Last modified 2026-06-17.