Tinygltf Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Tinygltf Project records in CISA KEV

No Tinygltf Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Tinygltf · all components

TI-2022-02775 CVE-2022-3008 · GHSA-ghg5-6g69-q4q3

HIGH 71

The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0312 Published 2022-09-05 Fixed in 2.6.0 CWE-78