Aller au contenu
9.6 Critique

CVE-2020-28589 An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and…

Description

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
tinyobjloader Versions non publiées
Suivre cette CVE