CVE-2026-29628 - Vulnerability Analysis

Overview

tinyobjloader contains a buffer overflow caused by improper handling of crafted .mtl files in experimental/tinyobj_loader_opt.h, letting attackers cause denial of service, exploit requires crafted .mtl file.

Severity & Score

Impact

Attackers can cause denial of service by crashing the application via crafted .mtl files.

Mitigation

Update to the latest version of tinyobjloader.

References

• https://github.com/kiyochii/CVE-2026-29628
• https://github.com/kiyochii/tinyobjloader/commit/386b73bb8c1a855236beb73b11f45f7feac4e03a

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner