Godot 4.x: heap out-of-bounds write in Radiance HDR image loader
A fix for an out-of-bounds write when loading corrupt HDR images was merged upstream. The patch validates image dimensions and bounds RLE runs and dumps against the remaining scanline width.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
the fix for this issue has been merged upstream. PR #124697, "Fix out-of-bounds write when loading corrupt HDR images", merged to master on 2026-10-20
Godot
Godot 4.x: heap out-of-bounds write in Radiance HDR image loader
- Affected versions
- Not stated in this extraction
- Fixed versions
- master
merged to master on 2026-10-20
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2026-110734
The PR body cites CVE-2026-110734
Publisher severity
No explicit severity was extracted.