Jkuhlmann Cgltf vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jkuhlmann Cgltf: 2 record(s), with affected versions and fixes.

CVE-2026-75148 Medium · 6.1 CWE-190 Aug 19, 2026

cgltf 1.15 Integer Overflow via cgltf_validate() Accessor Bounds Check

cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltf_validate() that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input with a specially crafted accessor count to overflow the unsigned integer multiplication of accessor stride and element count, causing the bounds check to pass and triggering a heap out-of-bounds read when cgltf_accessor_read_float() is subsequently called on the validated malformed accessor.

CVE-2026-32845 High · 8.4 CWE-190 Mar 23, 2026

jkuhlmann / cgltf <= 1.15 Sparse Accessor Validation Integer Overflow

cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when validating sparse accessors that allows attackers to trigger out-of-bounds reads by supplying crafted glTF/GLB input files with attacker-controlled size values. Attackers can exploit unchecked arithmetic operations in sparse accessor validation to cause heap buffer over-reads in cgltf_calc_index_bound(), resulting in denial of service crashes and potential memory disclosure.