Syoyo vulnerabilities
We track 2 vulnerabilities in Syoyo products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score
Latest Syoyo vulnerabilities
- 7.8 High severity
tinyobjloader-c: Stack-based Buffer Overflow
tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p, p_len), guarded only by . The identical vulnerable pattern is duplicated in a second func
- 8.8 High severity
tinygltf: Improper Neutralization of Special Elements used in a Command
The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using backticks. An attacker could craft an untrusted path input t