Skip to content
OpenAdvisories

Vendor

jkuhlmann

4 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 6.1

    cgltf through 1.15 Heap Out-of-Bounds Read via cgltf_accessor_unpack_floats()

    cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the sparse values cursor by the base bufferView byteStride. Attackers can supply a crafted glTF or GLB file that passes cgltf_validate() to rea…

  • Medium 6.1

    cgltf 1.15 Integer Overflow via cgltf_validate() Accessor Bounds Check

    cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltf_validate() that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers c…