CVE-2026-29628

A stack overflow in the experimental/tinyobjloaderopt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service DoS via supplying a crafted .mtl file...

CVE-2026-29628

The CVE affects the tinyobjloader project, where a stack overflow in the experimental/tinyobj_loader_opt.h file (commit d56555b) can be triggered by a specially crafted .mtl file, leading to a Denial of Service. Evidence across multiple feeds (NVD, SUSE, Red Hat, ENISA, PT-Security, etc.) confirm...