High severity8.8NVD Advisory· Published Aug 11, 2021· Updated Jun 17, 2026
CVE-2020-28589
CVE-2020-28589
Description
An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- tinyobjloader/tinyobjloaderdescription
- Range: v2.0-rc1, development commit 79d4421
- cpe:2.3:a:tinyobjloader_project:tinyobjloader:2.0:rc1:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- talosintelligence.com/vulnerability_reports/TALOS-2020-1212nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.