syoyo CVE debriefs

CVE-2026-71266

A buffer overflow vulnerability exists in the tinyobjloader-c library, specifically in the `tinyobj_parse_and_index_mtl_file()` function. This function reads lines from a `.mtl` material file into a fixed-size stack buffer without adequate checks, allowing for a stack overflow when a line exceeds the buffer's capacity. The vulnerability is exacerbated by the use of `assert()` for bounds checking, which ca [truncated]