CVE-2026-29628

A flaw was found in tinyobjloader. A stack overflow vulnerability exists in the experimental/tinyobjloaderopt.h file. A remote attacker could exploit this by supplying a specially crafted .mtl file. This could lead to a Denial of Service DoS, making the application unavailable...