The vulnerability in cgltf (<=1.15) involves an integer overflow in the bounds checking logic of the cgltf_validate() function. Specifically, the multiplication of accessor stride and element count can overflow when processing crafted accessor count values in .gltf or .glb files. This overflow causes the bounds check to incorrectly succeed, allowing a subsequent call to cgltf_accessor_read_float() to perform a heap out-of-bounds read. This can lead to memory disclosure and denial of service conditions. The vulnerability requires local attack vector with low attack complexity and no privileges, but user interaction is needed. There is no indication of an official fix or patch as of the published date.

Successful exploitation can cause memory disclosure and denial of service due to heap out-of-bounds reads triggered by integer overflow in accessor count processing. The vulnerability affects the integrity and availability of applications using vulnerable versions of cgltf when parsing malicious .gltf or .glb files.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid processing untrusted .gltf or .glb files with cgltf versions 1.15 and earlier. Monitoring vendor channels for updates is recommended.