Vulnerabilities
Summary — last 7 days
New vulnerabilities3,331▲ 437 vs. last week
Critical / high1,532▲ 47 vs. last week
New active exploitation (KEV)5→ no change vs. last week
Unscored (no CVSS)177▲ 6 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.8) | 0.17% | — | Tinyobjloader-cAI | 8/5/2026 | 8/26/2026 | tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p, p_len), guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file. | |
| Deferred | Medium (6.2) | 0.17% | 💥 PoC | TinyobjloaderAI | 4/13/2026 | 6/17/2026 | A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (DoS) via supplying a crafted .mtl file. | |
| Modified | High (8.8) | 1.9% | — | Tinyobjloader Project Tinyobjloader | 8/11/2021 | 6/17/2026 | An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. |