cgltf vulnerabilities
CVEs whose affected-version data names the cgltf package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112018High· 7.0cgltf through 1.15 Heap Out-of-Bounds Write via cgltf_accessor_unpack_floats()
cgltf through 1.15 contains a heap out-of-bounds write vulnerability in cgltf_accessor_unpack_floats() that allows attackers to write outside the output buffer via unchecked sparse accessor indices. Attackers can supply a crafted glTF or…
▾ Twilightjkuhlmann · cgltfvia CVEORG
CVE-2026-112019Medium· 6.1cgltf through 1.15 Heap Out-of-Bounds Read via cgltf_accessor_unpack_floats()
cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the sparse values cursor by the base bufferView byteStride. Attackers can supply a crafted glTF or GLB file that passes c…
▾ Sunlitjkuhlmann · cgltfvia CVEORG