All issues

[Bug]gltf_load_buffers data:base64 URI allocates an output buffer using attacker-controlled buffer.byteLength (allocation-size-too-big / DoS) (CWE-789)

#307

· 1820893135-pixel opened

on Sep 8, 2026

[Bug]Misaligned type-punned dereference of accessor/bufferView data in cgltf (UBSan misaligned-load via cgltf_validate / unpack APIs) (CWE-188)

#306

· 1820893135-pixel opened

on Sep 8, 2026

[Bug] Memory leak in cgltf_write_file() when fopen() fails

#303

· trustqq opened

on Aug 27, 2026

Out-of-bounds heap read in cgltf_accessor_unpack_floats / read_* on unvalidated accessors

#302

· A-Random-Person-From-Earth opened

on Aug 23, 2026

Security: Integer overflow in cgltf_validate() non-sparse accessor causes heap OOB read (CWE-125/CWE-190)

#301

· Bek275 opened

on Aug 17, 2026

Heap-buffer-overflow WRITE in cgltf_accessor_unpack_floats() (CWE-787, write-what-where) -> RCE

#300

· gududezoumingqu opened

on Aug 3, 2026

Heap-buffer-overflow READ in `cgltf_validate()` → `cgltf_calc_index_bound()` (CWE-125), reachable from an untrusted glTF/GLB file. A 430-byte file reliably crashes the process with SIGSEGV in a normal (non-sanitized) build.

#299

· gududezoumingqu opened

on Aug 3, 2026

Security: request a private channel for a memory-safety report in the glTF parser

#298

· vikram183 opened

on Jul 30, 2026

Heap-buffer-overflow (OOB read) in `cgltf_accessor_unpack_floats` for sparse accessors

#295

· nonetype opened

on Jun 4, 2026

Heap buffer overflow (OOB write) in cgltf_accessor_unpack_floats via unchecked sparse accessor indices

#292

· Gayang2902 opened

on Apr 28, 2026

State of validation coverage?

#290

· pablode opened

on Apr 5, 2026

Integer Overflow in cgltf_validate() Sparse Accessor Validation Leads to Heap Buffer Overflow on read

#287

· ljoer opened

on Mar 17, 2026