9.6
Critique
CVE-2020-28589 An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and…
Description
An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| tinyobjloader | Versions non publiées |