Advisory catalogCVE-2026-110734
CVE-2026-110734Published
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the ima…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110734 · Microsoft / collected KEV context
cve-program · CVE-2026-110734
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.