Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer overflow, missing padding initialization vulnerability in (De)Serialization functions (core/io/marshalls.cpp) that can result in DoS (packet of death), possible leak of uninitialized memory. This attack appear to be exploitable via A malformed packet is received over the network by a Godot application that uses built-in serialization (e.g. game server, or game client). Could be triggered by multiplayer opponent. This vulnerability appears to have been fixed in 2.1.5, 3.0.6, master branch after commit feaf03421dda0213382b51aff07bd5a96b29487b.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Godot Engine 安全漏洞
Vulnerability Description
Godot Engine是一款跨平台的游戏引擎。该引擎支持通过统一界面创建2D和3D游戏。 Godot Engine 2.1.5之前版本和3.0.6之前的3.0版本中的core/io/marshalls.cpp文件存在安全漏洞。攻击者可借助畸形的数据包利用该漏洞造成拒绝服务，泄露未初始化的内存。
CVSS Information
N/A
Vulnerability Type
N/A