A heap out-of-bounds read vulnerability exists in Tinyexr through 3.2.0 in the ParseEXRMultipartHeaderFromMemory() function. This vulnerability allows attackers to read beyond buffers due to a stale remaining-size value. A crafted multi-part EXR file can cause applications to crash or leak adjacent heap memory into attribute values. The vulnerability is caused by inadequate bounds checking, leading to pot [truncated]
A buffer overflow vulnerability exists in the tinyobjloader-c library, specifically in the `tinyobj_parse_and_index_mtl_file()` function. This function reads lines from a `.mtl` material file into a fixed-size stack buffer without adequate checks, allowing for a stack overflow when a line exceeds the buffer's capacity. The vulnerability is exacerbated by the use of `assert()` for bounds checking, which ca [truncated]
