Vulnerabilidades de Syoyo
CVEs publicadas que afetam produtos de Syoyo: 2 registro(s), com severidade, exploração e correções.
CVE-2026-110597
Média · 6.1
CWE-125 14/10/2026
Tinyexr through 3.2.0 Heap Out-of-Bounds Read via ParseEXRMultipartHeaderFromMemory
Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allows attackers to read beyond buffers due to a stale remaining-size value. Attackers can supply a crafted multi-part EXR file whose later part headers bypass ReadAttribute() bounds checks, crashing applications or leaking adjacent heap memory into attribute values.
CVE-2026-71266
Alta · 7.8
CWE-121 05/08/2026
tinyobjloader-c Stack Buffer Overflow in MTL Material File Line Parsing
tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p, p_len), guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file.