Lucene search
K

15 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:51 a.m.2 views

SUSE CVE-2020-28589

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS9.3AI score0.00836EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.1 views

The vulnerability of the LoadObj function of the .obj Tinyobjloader loader allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the LoadObj function of the .obj Tinyobjloader loader is related to unvalidated array indexing. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures through the use of a malicious file...

9.3CVSS7.8AI score0.00836EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2021/08/11 1:15 p.m.2 views

DEBIAN-CVE-2020-28589

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.6AI score0.00836EPSS
Exploits1References1
OSV
OSV
added 2021/08/11 1:15 p.m.18 views

CVE-2020-28589

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.1AI score
Exploits0References1
NVD
NVD
added 2021/08/11 1:15 p.m.8 views

CVE-2020-28589

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.6CVSS0.00836EPSS
Exploits1References1
Prion
Prion
added 2021/08/11 1:15 p.m.10 views

Input validation

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

6.8CVSS8.7AI score0.00836EPSS
Exploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2021/08/11 1:15 p.m.16 views

CVE-2020-28589

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.6CVSS7.2AI score0.00836EPSS
Exploits1References2
OSV
OSV
added 2021/08/11 1:15 p.m.2 views

UBUNTU-CVE-2020-28589

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.6CVSS5.9AI score0.00836EPSS
Exploits1References3
Snyk
Snyk
added 2021/08/11 1:15 p.m.1 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index. An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code...

9.6CVSS7.5AI score0.00836EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/08/11 12:37 p.m.12 views

CVE-2020-28589

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.6CVSS8.7AI score0.00836EPSS
Exploits1References1
CVE
CVE
added 2021/08/11 12:37 p.m.51 views

CVE-2020-28589

CVE-2020-28589 affects tinyobjloader, specifically the LoadObj functionality in v2.0-rc1 and the development commit 79d4421. Affected component/function/file: LoadObj; root cause: improper array index validation. Impact per sources: could lead to code execution upon processing a specially crafted...

9.6CVSS8.7AI score0.00836EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2021/08/11 12:37 p.m.15 views

CVE-2020-28589

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.6CVSS9.1AI score0.00836EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2021/08/11 12:0 a.m.2 views

PT-2021-6503 · Unknown +1 · Tinyobjloader +1

Name of the Vulnerable Software and Affected Versions: tinyobjloader versions v2.0-rc1 through development commit 79d4421 Description: An improper array index validation issue exists in the LoadObj functionality, allowing a specially crafted file to potentially lead to code execution. An attacker...

9.6CVSS8.7AI score0.00836EPSS
Exploits1References13
Talos
Talos
added 2021/07/30 12:0 a.m.68 views

tinyobjloader LoadObj improper array index validation vulnerability

Summary An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Teste...

9.6CVSS8.5AI score0.00836EPSS
Exploits1
CNNVD
CNNVD
added 2021/07/30 12:0 a.m.1 views

tinyobjloader 输入验证错误漏洞

tinyobjloader is a software application. Small but powerful single-file wavefront obj loader written in C++03. An input validation error vulnerability exists in tinyobjloader, which stems from a use-after-release vulnerability in the tinyobjloader.h::LoadObj function in tinyobjloader version...

9.6CVSS8.5AI score0.00836EPSS
Exploits1References4
Rows per page
Query Builder