CVE-2026-112019

The cgltf library (versions through 1.15 ) contains a heap out-of-bounds read vulnerability within the cgltf_accessor_unpack_floats() function. The flaw occurs because the function advances the sparse values cursor by the base bufferView byteStride. An attacker can provide a crafted glTF or GLB f...

EUVD-2026-103472

cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltfaccessorunpackfloats that advances the sparse values cursor by the base bufferView byteStride. Attackers can supply a crafted glTF or GLB file that passes cgltfvalidate to read adjacent heap memory into vertex data or cra...

CVE-2026-112018

The cgltf library (through version 1.15 ) is vulnerable to a heap out-of-bounds write within the cgltf_accessor_unpack_floats() function. The root cause is the processing of unchecked sparse accessor indices , which allows an attacker to write outside the designated output buffer. By providing a ...

PT-2026-78369

Name of the Vulnerable Software and Affected Versions cgltf versions prior to 1.16 Description An integer overflow exists in the non-sparse accessor bounds check within the cgltf validate function. A remote attacker can exploit this by providing malformed .gltf or .glb files with specially crafte...

CVE-2026-32845 jkuhlmann / cgltf <= 1.15 Sparse Accessor Validation Integer Overflow

cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltfvalidate function when validating sparse accessors that allows attackers to trigger out-of-bounds reads by supplying crafted glTF/GLB input files with attacker-controlled size values. Attackers can exploit unchecke...

CVE-2026-32388

Missing Authorization vulnerability in linethemes GLB glb allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GLB: from n/a through = 1.2.2...

CVE-2026-32388

Missing Authorization vulnerability in linethemes GLB glb allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GLB: from n/a through = 1.2.2...

CVE-2026-32388: Missing Authorization

Missing Authorization vulnerability in linethemes GLB glb allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GLB: from n/a through = 1.2.2...

WordPress plugin GLB 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

assimp:assimp_fuzzer_glb: Heap-buffer-overflow in aiColor4t<float>* GetVertexColorsForType<unsigned short>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6295007387779072 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzerglb Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

assimp:assimp_fuzzer_glb: Heap-buffer-overflow in Assimp::glTF2Importer::ImportNode

Detailed Report: https://oss-fuzz.com/testcase?key=6480755831406592 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzerglb Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7b60fbbe1740 Crash State: Assimp::glTF2Importer::ImportNode...

assimp:assimp_fuzzer_glb: Use-of-uninitialized-value in std::__1::__unordered_map_equal<Assimp::Vertex, std::__1::pair<Assimp::Vertex co

Detailed Report: https://oss-fuzz.com/testcase?key=6403453281959936 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzerglb Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::unorderedmapequalAssimp::Vertex,...

assimp:assimp_fuzzer_glb: Use-of-uninitialized-value in bool ProcessArray<aiVector3t<float>>

Detailed Report: https://oss-fuzz.com/testcase?key=5551886358085632 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzerglb Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bool ProcessArray...

EUVD-2018-13842

Malware in sbrugna...

Malicious code in @zalastax/nolb-glb (npm)

The package @zalastax/nolb-glb was found to contain malicious code...

MAL-2025-11581 Malicious code in @zalastax/nolb-glb (npm)

The package @zalastax/nolb-glb was found to contain malicious code...

CVE-2024-34125 ZDI-CAN-24027: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...

CVE-2024-34125 ZDI-CAN-24027: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...

PT-2024-25707 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.11 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...