This vulnerability involves a stack overflow in the tinyobjloader library's experimental/tinyobj_loader_opt.h component. Specifically, when processing a maliciously crafted .mtl file, the vulnerable code can be forced to overflow the stack, resulting in a Denial of Service condition. The issue was identified in a particular commit (d56555b). No official remediation or patch has been documented, and the vulnerability does not affect cloud services.

Successful exploitation of this vulnerability results in a Denial of Service by crashing the application that uses the affected tinyobjloader component when parsing a crafted .mtl file. There is no indication of code execution or data corruption beyond service disruption. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid processing untrusted or malformed .mtl files with the affected tinyobjloader version. Monitor vendor channels for updates and apply patches promptly once available.