http://bugzilla.opensuse.org/show_bug.cgi?id=1182177 Bug ID: 1182177 Summary: VUL-0: CVE-2021-26825: godot: integer overflow when loading specially crafted .TGA image files Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/277464/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: cunix@mail.de Reporter: atoptsoglou@suse.com QA Contact: security-team@suse.de CC: maxmitschke@fastmail.com Found By: Security Response Team Blocker: --- CVE-2021-26825 An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::load_image() function at line: const size_t buffer_size = (tga_header.image_width * tga_header.image_height) * pixel_size; The bug leads to Dynamic stack buffer overflow. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash. Reference: https://github.com/godotengine/godot/pull/45702 Upstream patch: https://github.com/godotengine/godot/pull/45702/commits/113b5ab1c45c01b8e6d5... References: https://bugzilla.redhat.com/show_bug.cgi?id=1926936 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-26825 https://github.com/godotengine/godot/pull/45702 https://github.com/godotengine/godot/pull/45702/files http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26825 -- You are receiving this mail because: You are on the CC list for the bug.