CyberRota Analysis
AI-GeneratedThe vulnerability exists in cgltf versions up to 1.15, where an integer overflow in the bounds check of the cgltf_validate() function can be exploited by remote attackers through specially crafted .gltf or .glb files. This flaw can lead to memory disclosure and denial of service due to heap out-of-bounds reads triggered by malformed accessor count values. Developers and organizations utilizing cgltf for 3D model processing should prioritize patching this vulnerability to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltf_validate() that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input with a specially crafted accessor count to overflow the unsigned integer multiplication of accessor stride and element count, causing the bounds check to pass and triggering a heap out-of-bounds read when cgltf_accessor_read_float() is subsequently called on the validated malformed accessor.