CVE-2026-29628 - A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (DoS) via supplying a crafted .mtl file

Back Back to CVE browser

MEDIUM

A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (DoS) via supplying a crafted .mtl file

Published Apr 13, 2026

6.2

MEDIUM

CVSS 3.1

EPSS 0.17%

Description

A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (DoS) via supplying a crafted .mtl file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-121

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21926		Advisory
https://github.com/kiyochii/CVE-2026-29628
https://github.com/kiyochii/tinyobjloader/commit/386b73bb8c1a855236beb73b11f45f7feac4e03a

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 13, 2026

Updated Apr 13, 2026

Reserved Mar 4, 2026

Link CVE-2026-29628

CISA Vulnrichment

Updated Apr 13, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2026-29628

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 13, 2026

Updated Apr 13, 2026

Link EUVD-2026-21926

GitHub

No data