Search results

gltfio: heap OOB write in cgltf_accessor_unpack_floats via meshopt-bypassed sparse accessor index

Status: Open.

#10201 In google/filament;

· destro4evr-rgb opened on Jul 12, 2026

filameshio: heap OOB write in MeshReader compressed vertex path when UV1 absent but sizes.uv1 non-zero

Status: Open.

#10200 In google/filament;

· destro4evr-rgb opened on Jul 12, 2026

gltfio: heap OOB read in updateBoneMatrices() - asset->mSkins desync when createSkins() skips validation failures

Status: Open.

#10198 In google/filament;

· destro4evr-rgb opened on Jul 11, 2026

gltfio: heap OOB read in uploadBuffers() - accessor count vs morphTargetCount mismatch

Status: Open.

#10197 In google/filament;

· destro4evr-rgb opened on Jul 11, 2026

gltfio: heap out-of-bounds write in TangentsJob via unvalidated MAT4-typed morph normal/tangent accessor (type confusion)

Status: Open.

#10194 In google/filament;

· ataberk-xyz opened on Jul 10, 2026

gltfio: EXT_meshopt_compression indices bypass cgltf validation → OOB index read

Status: Open.

#10193 In google/filament;

· adilburaksen opened on Jul 10, 2026

gltfio: heap OOB read + std::vector OOB on malformed KHR_materials_variants mapping (createMaterialVariants)

Status: Open.

#10192 In google/filament;

· adilburaksen opened on Jul 10, 2026

gltfio: heap OOB read on malformed skinned .glb — JOINTS_0 index unchecked in computeBoundingBoxSkinned

Status: Open.

#10191 In google/filament;

· adilburaksen opened on Jul 10, 2026

gltfio: heap out-of-bounds write in AssetLoaderExtended::createPrimitive (slotIndices sized by filtered morph count, indexed by raw index)

Status: Open.

#10180 In google/filament;

· ataberk-xyz opened on Jul 8, 2026

Direct lighting diffuse/specular energy preservation and IBL consistency

enhancementNew feature or requestNew feature or request

low priorityLow priority issueLow priority issue

Status: Open.

#10140 In google/filament;

· zyz23333 opened on Jun 21, 2026

Heap out-of-bounds read in gltfio animation playback

gltfSpecific to glTF supportSpecific to glTF support

security

Status: Open.

#10138 In google/filament;

· MassimoPalozzi opened on Jun 20, 2026

gltfio: Heap out-of-bounds read in resource loaders and TangentsJob under release builds

gltfSpecific to glTF supportSpecific to glTF support

security

Status: Open.

#10134 In google/filament;

· deezsecc opened on Jun 19, 2026