{"id":"CVE-2026-71266","published":"2026-08-05T13:24:50.843","lastModified":"2026-08-10T12:17:29.040","description":"tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p, p_len), guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://github.com/syoyo/tinyobjloader-c","tags":[]},{"url":"https://github.com/syoyo/tinyobjloader-c/blob/master/tinyobj_loader_c.h","tags":[]}],"exploitRefs":[{"url":"https://github.com/syoyo/tinyobjloader-c","tags":[]},{"url":"https://github.com/syoyo/tinyobjloader-c/blob/master/tinyobj_loader_c.h","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw involves a fixed-size stack buffer in tinyobjloader-c's parsing function, allowing potential overflow if input exceeds 4096 bytes.","exploitability":"Exploitation requires crafting a .mtl file with maliciously large content; practicality depends on the target environment and network access.","blast_radius":"If exploited, could lead to remote code execution or denial of service affecting applications using tinyobjloader-c for material file parsing.","remediation":"Update to a patched version of tinyobjloader-c or apply buffer size adjustments in the vulnerable functions.","tags":["rce","buffer-overflow","parsing","security"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T06:53:00.728Z"}}