Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Information
N/A
Vulnerability Type
对数组索引的验证不恰当
Vulnerability Title
tinyobjloader 输入验证错误漏洞
Vulnerability Description
tinyobjloader是一个应用软件。用 C++03 编写的小巧但功能强大的单文件波前 obj 加载器。 tinyobjloader 存在输入验证错误漏洞,该漏洞源于tinyobjloader v0.9.25 版本和 v1.0.6 版本的 tiny_obj_loader.h::LoadObj() 功能中存在释放后使用漏洞。特制的文件可能会导致释放后使用,从而导致代码执行。攻击者可以提供恶意文件来触发此漏洞。
CVSS Information
N/A
Vulnerability Type
N/A