CVE-2026-29628

A stack overflow in the experimental/tinyobjloaderopt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service DoS via supplying a crafted .mtl file...

CVE-2026-29628

A stack overflow exists in the experimental/tinyobj_loader_opt.h file of the tinyobjloader library (specifically affecting versions up to commit d56555b). The vulnerability is triggered when processing a crafted .mtl file , where an oversized input is written into a fixed-size local buffer, poten...