Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority MEDIUM 64

Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allows attackers to read beyond buffers due to a stale remaining-size value.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00249 Published 2026-10-14 No fix listed CWE-125
Priority LOW 35

tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p, p_len), guarded only by .

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00174 Published 2026-08-05 No fix listed CWE-121