CVE-2026-71266

Name of the Vulnerable Software and Affected Versions tinyobjloader-c (affected versions not specified)

Description The tinyobj parse and index mtl file() function in tinyobj loader c.h reads lines from a .mtl material file into a fixed 4096-byte stack buffer linebuf using memcpy(linebuf, p, p len). The operation is guarded by assert(p len < 4095), but since assert() is disabled in release builds (compiled with -DNDEBUG), a crafted .mtl file with a line exceeding 4096 bytes can cause a stack overflow. This allows the linebuf to overflow into the adjacent namebuf variable and other stack memory, potentially corrupting the stack of applications loading malicious 3D model or material files. This same pattern exists in another function within the same file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.