tinyobjloader 输入验证错误漏洞

tinyobjloader is a software application. Small but powerful single-file wavefront obj loader written in C++03. An input validation error vulnerability exists in tinyobjloader, which stems from a use-after-release vulnerability in the tinyobjloader.h::LoadObj function in tinyobjloader version...

tinyobjloader LoadObj improper array index validation vulnerability

Summary An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Teste...