CVE-2026-22189 Details

A stack-based buffer overflow vulnerability has been identified in the Panda3D game engine, specifically in versions up to and including 1.10.16, within the egg-mkfont utility. This vulnerability arises from the use of an unbounded sprintf() function that allows attacker-controlled input to overflow a fixed-size stack buffer. The issue occurs when the glyph pattern option (-gp) is used to format user-supplied data into the buffer without proper length validation. As a result, an excessively long glyph pattern can corrupt memory, leading to a crash of the egg-mkfont process. Furthermore, depending on the build configuration and execution environment, this memory corruption could be exploited for arbitrary code execution.