CVE-2026-112018 Details

A heap out-of-bounds write vulnerability has been identified in the cgltf library, specifically in the version through 1.15. The issue arises in the function cgltf_accessor_unpack_floats(), where sparse accessor indices are not properly validated. This vulnerability allows attackers to manipulate glTF or GLB files by inserting large sparse indices, leading to memory corruption, application crashes, and potentially arbitrary code execution, especially when the validation function cgltf_validate() is not utilized.

To address this vulnerability, the cgltf library should be updated to version 1.15 or later, where the issue has been fixed. Additionally, consumers of the library should ensure that they validate their glTF data before unpacking accessors, especially when using sparse accessors.