Tinygltf Project

Tinygltf

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2022-3008

Exploit
  • EPSS 9.79%
  • Published 05.09.2022 09:15:10
  • Last modified 21.11.2024 07:18:37

The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using backticks. An attacker could craft an untrusted pa...