Skip to content
Threat Feed

Tag

GlTF

1 brief RSS
high advisory

cgltf Integer Overflow Vulnerability in Sparse Accessor Validation

cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when validating sparse accessors, allowing attackers to trigger out-of-bounds reads via crafted glTF/GLB files, leading to denial of service and potential memory disclosure.

integer-overflow denial-of-service memory-disclosure glTF cgltf
2r 2t