cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when validating sparse accessors that allows attackers to trigger out-of-bounds reads by supplying crafted glTF/GLB input files with attacker-controlled size values. Attackers can exploit unchecked arithmetic operations in sparse accessor validation to cause heap buffer over-reads in cgltf_calc_index_bound(), resulting in denial of service crashes and potential memory disclosure.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
References
History
Mon, 23 Mar 2026 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Mon, 23 Mar 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when validating sparse accessors that allows attackers to trigger out-of-bounds reads by supplying crafted glTF/GLB input files with attacker-controlled size values. Attackers can exploit unchecked arithmetic operations in sparse accessor validation to cause heap buffer over-reads in cgltf_calc_index_bound(), resulting in denial of service crashes and potential memory disclosure. | |
| Title | jkuhlmann / cgltf <= 1.15 Sparse Accessor Validation Integer Overflow | |
| Weaknesses | CWE-190 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: VulnCheck
Published:
Updated: 2026-03-23T18:37:02.382Z
Reserved: 2026-03-16T18:11:41.758Z
Link: CVE-2026-32845
Vulnrichment
Updated: 2026-03-23T17:11:44.957Z
NVD
Status : Received
Published: 2026-03-23T16:16:48.583
Modified: 2026-03-23T18:16:26.013
Link: CVE-2026-32845
Redhat
No data.
OpenCVE Enrichment
No data.