← Back

Tinyobjloader

tinyobjloader

Vendor: Tinyobjloader Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-28589
1Tinyobjloader Project
1Tinyobjloader
Nov 21, 2024
Aug 11, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attac...Show more
An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less