Vulnerability Description
cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltf_validate() that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input with a specially crafted accessor count to overflow the unsigned integer multiplication of accessor stride and element count, causing the bounds check to pass and triggering a heap out-of-bounds read when cgltf_accessor_read_float() is subsequently called on the validated malformed accessor.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/jkuhlmann/cgltf/issues/301
- https://www.vulncheck.com/advisories/cgltf-integer-overflow-via-cgltf-validate-a
FAQ
What is CVE-2026-75148?
CVE-2026-75148 is a vulnerability with a CVSS score of 6.1 (MEDIUM). cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltf_validate() that allows remote attackers to cause memory disclosure and denial of serv...
How severe is CVE-2026-75148?
CVE-2026-75148 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-75148?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.