Vulnerability Spotlight: Use-after-free vulnerability in tinyobjloader

guest · Aug 5, 2021

Vulnerability Spotlight: Use-after-free vulnerability in tinyobjloader
August 4, 2021
https://blog.talosintelligence.com/2021/08/vuln-spotlight-.html

Cisco Talos recently discovered a use-after-free vulnerability in a specific function of tinyobjloader. An adversary could trick a user into opening a specially crafted file, causing a use-after-free condition, and potentially code execution. Tinyobjloader is an open-source loader for embedding the .obj loader into graphics-rendering projects.

In accordance with our coordinated disclosure policy, Cisco Talos worked with tinyobjloader to ensure that this issue is resolved and that an update is available for affected customers.
Click to expand...

Read the complete vulnerability advisory here for additional information.
Talos tested and confirmed that this vulnerability affects versions 0.9.25 and 1.0.6 of tinyobjloader.
Click to expand...

Log in or Sign up

Vulnerability Spotlight: Use-after-free vulnerability in tinyobjloader

guest Guest

Log in or Sign up

Vulnerability Spotlight: Use-after-free vulnerability in tinyobjloader

guest Guest

Useful Searches