Vulnerability Spotlight: Use-after-free vulnerability in tinyobjloader

Lilith of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered that a specific function of tinyobjloader does not properly validate array indexes. An adversary could trick a user into opening a specially crafted file, causing an index... This is only the...

tinyobjloader 输入验证错误漏洞

tinyobjloader is a software application. Small but powerful single-file wavefront obj loader written in C++03. An input validation error vulnerability exists in tinyobjloader, which stems from a use-after-release vulnerability in the tinyobjloader.h::LoadObj function in tinyobjloader version...

tinyobjloader LoadObj improper array index validation vulnerability

Summary An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Teste...