CVE-2026-22190

The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains an uncontrolled format string vulnerability. The -gp (glyph pattern) command-line option is used directly as the format string for sprintf() with only a single argument supplied. If an attacker provides additional format specifiers, egg-mkfont may read unintended stack values and write the formatted output into generated .egg and .png files, resulting in disclosure of stack-resident memory and pointer values.

• CWE-134

• https://github.com/panda3d/panda3dProduct
• https://seclists.org/fulldisclosure/2026/Jan/11Exploit, Mailing List, Third Party Advisory
• https://www.panda3d.org/Product
• https://www.vulncheck.com/advisories/panda3d-egg-mkfont-format-string-information-disclosureThird Party Advisory

Published

Jan 7, 2026

Last Modified

Jul 14, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-22185OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up…4.6
• CVE-2026-22186Bio-Formats versions up to and including 8.3.0 contain an XM…7.1
• CVE-2026-22187Bio-Formats versions up to and including 8.3.0 perform unsaf…7.8
• CVE-2026-22188The deploy-stub component in Panda3D versions up to and incl…5.5
• CVE-2026-22189The egg-mkfont utility in Panda3D versions up to and includi…9.8
• CVE-2026-2219It was discovered that dpkg-deb (a component of dpkg, the De…7.5
• CVE-2026-22191Beghelli Sicuro24 SicuroWeb contains a template injection vu…5.2
• CVE-2026-22192Voltronic Power SNMP Web Pro version 1.1 contains an authent…9.9
• CVE-2026-22193wpDiscuz before 7.6.47 contains an SQL injection vulnerabili…7.5
• CVE-2026-22194GestSup versions up to and including 3.2.60 contain a cross-…8.8
• CVE-2026-22195GestSup versions prior to 3.2.60 contain a SQL injection vul…8.1
• CVE-2026-22196GestSup versions prior to 3.2.60 contain a SQL injection vul…8.1