CVE-2026-110735Published
Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string). A string length is read from the resource file into a signed 32-bit inte…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110735 · Microsoft / collected KEV context
cve-program · CVE-2026-110735
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.