CVE-2026-32845 - Vulnerability Analysis

Overview

cgltf <= 1.15 contains an integer overflow caused by unchecked arithmetic in cgltf_validate() when validating sparse accessors, letting attackers trigger out-of-bounds reads and cause denial of service or memory disclosure, exploit requires crafted glTF/GLB files.

Severity & Score

Impact

Attackers can cause denial of service crashes and potentially disclose memory via crafted input files.

Mitigation

Update to the latest version beyond 1.15.

References

• https://github.com/jkuhlmann/cgltf/issues/287
• https://www.vulncheck.com/advisories/jkuhlmann-cgltf-sparse-accessor-validation-integer-overflow

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 23, 2026

🟠 CVE-2026-32845 - High (8.4) cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when validating sparse accessors that allows attackers to trigger out-of-bounds reads by supplying crafted glTF/GLB input files with attacker-c... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32845/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner