Skip to content

Product

debian/tinygltf vulnerabilities

2 published CVES affecting debian/tinygltf, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest debian/tinygltf CVEs

Newest publication first

  2. CVE-2022-3008 Command Injection on tinygltf

    Published
    HighCVSS 8.8 EPSS 3.1%

    The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using backticks. An attacker could craft an untrusted path input that would result in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.