syoyo
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| tinydng | 1 | – | Mar 22, 2023 |
| tinyexr | 1 | – | Oct 14, 2026 |
| tinygltf | 1 | – | Sep 5, 2022 |
| tinyobjloader-c | 1 | – | Aug 5, 2026 |
Exploited and recent CVEs
- CVE-2026-110597 Tinyexr through 3.2.0 Heap Out-of-Bounds Read via ParseEXRMultipartHeaderFromMemory 0.2%
- CVE-2026-71266 tinyobjloader-c Stack Buffer Overflow in MTL Material File Line Parsing 0.2%
- CVE-2023-1570 syoyo tinydng tiny_dng_loader.h __interceptor_memcpy heap-based overflow 0.4%
- CVE-2022-3008 Command Injection on tinygltf 3.1%