{"id":"CVE-2026-71266","published":"2026-08-05T13:24:50.843","lastModified":"2026-08-10T12:17:29.040","description":"tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p, p_len), guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://github.com/syoyo/tinyobjloader-c","tags":[]},{"url":"https://github.com/syoyo/tinyobjloader-c/blob/master/tinyobj_loader_c.h","tags":[]}],"exploitRefs":[{"url":"https://github.com/syoyo/tinyobjloader-c","tags":[]},{"url":"https://github.com/syoyo/tinyobjloader-c/blob/master/tinyobj_loader_c.h","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw in tinyobjloader-c allows an attacker to overflow a stack buffer by manipulating a .mtl file, leading to potential code execution or data corruption.","exploitability":"Exploitation is moderately hard as it requires crafting a specific .mtl file with a payload that overflows the buffer, and the vulnerability is only triggered via a read operation.","blast_radius":"If exploited, the impact could be severe, potentially leading to remote code execution or data loss on the affected system.","remediation":"Upgrade to the fixed version 2.590 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["buffer-overflow","stack-overflow","file-inclusion"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:44:58.588Z"}}