Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string). A string length is read from the resource file into a signed 32-bit inte…

{
                    "defaultStatus": "unknown",
                    "modules": [
                        "Binary resource loader"
                    ],
                    "product": "Godot Engine",
                    "programFiles": [
                        "core/io/resource_format_binary.cpp"
                    ],
                    "programRoutines": [
                        {
                            "name": "ResourceLoaderBinary::get_unicode_string"
                        }
                    ],
                    "repo": "https://github.com/godotengine/godot",
                    "vendor": "godotengine",
                    "versions": [
                        {
                            "lessThanOrEqual": "4.7.2",
                            "status": "affected",
                            "version": "1.0.0",
                            "versionType": "semver"
                        }
                    ]
                }