A vulnerability was found in tinyobjloader d56555b and classified as critical . This affects the function tinyobj_loader_opt in the library experimental/tinyobj_loader_opt.h of the component mtl File Handler . Executing a manipulation can lead to stack-based buffer overflow. This vulnerability is tracked as CVE-2026-29628 . The attack is only possible within the local network. No exploit exists. It is advisable to implement a patch to correct this issue.