Panda3D vulnerabilities
We track 2 vulnerabilities in Panda3D products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 7, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Panda3D vulnerabilities
- 7.5 High severity
Panda3D: Use of Externally-Controlled Format String
The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains an uncontrolled format string vulnerability. The -gp (glyph pattern) command-line option is used directly as the format string for sprintf() with only a single argument supplied. I
- 9.8 Critical severity
Panda3D: Out-of-bounds Write
The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains a stack-based buffer overflow vulnerability due to use of an unbounded sprintf() call with attacker-controlled input. When constructing glyph filenames, egg-mkfont formats a user-s