tinyobjloader-c vulnerabilities

1 known vulnerability in tinyobjloader-c from Syoyo. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  tinyobjloader-c: Stack-based Buffer Overflow

  CVE-2026-71266Aug 5, 2026Syoyo

  tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p, p_len), guarded only by . The identical vulnerable pattern is duplicated in a second func