CVE-2026-29628: Medium severity tinyobjloader tinyobjloader vulnerability

Published Apr 13, 2026

Updated

A stack overflow in the experimental/tinyobjloaderopt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (DoS) via supplying a crafted .mtl file.

Affected Software

1 affected component

tinyobjloader tinyobjloader=d56555b

Event History

Apr 13, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-29628?

The severity of CVE-2026-29628 is medium with a CVSS score of 6.2.

How do I fix CVE-2026-29628?

To fix CVE-2026-29628, ensure you update to the patched version of tinyobjloader following the latest releases.

What kind of attack does CVE-2026-29628 allow?

CVE-2026-29628 allows attackers to cause a Denial of Service (DoS) by supplying a crafted .mtl file.

In which file does CVE-2026-29628 occur?

CVE-2026-29628 occurs in the experimental/tinyobj_loader_opt.h file of tinyobjloader.

What impact does CVE-2026-29628 have on tinyobjloader?

CVE-2026-29628 can lead to a stack overflow that disrupts the functionality of the tinyobjloader, resulting in a crash.

CVE-2026-29628: Medium severity tinyobjloader tinyobjloader vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-29628?

How do I fix CVE-2026-29628?

What kind of attack does CVE-2026-29628 allow?

In which file does CVE-2026-29628 occur?

What impact does CVE-2026-29628 have on tinyobjloader?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-29628?

How do I fix CVE-2026-29628?

What kind of attack does CVE-2026-29628 allow?

In which file does CVE-2026-29628 occur?

What impact does CVE-2026-29628 have on tinyobjloader?