tinygltf vulnerabilities

1 known vulnerability in tinygltf from Syoyo. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  tinygltf: Improper Neutralization of Special Elements used in a Command

  CVE-2022-3008Sep 5, 2022SyoyoEPSS 3.12%

  The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using backticks. An attacker could craft an untrusted path input t