9.6 Critical

CVE-2020-28589 An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and…

Description

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products and versions

Product	Affected versions	Fixed in
tinyobjloader	Versions not published

Do you use tinyobjloader?

Track this CVE Watch tinyobjloader Check my SBOMs

www.cveye.io/en/cve/CVE-2020-28589

Timeline

Published August 11, 2021
Last modified August 4, 2024

References

talosintelligence.com talosintelligence.com

Track this CVE