Issues

webgpu: compressed textures receive invalid RenderAttachment usage

google/filament#10538 · opened

on Oct 7, 2026

compressed texture support ignores enabled device features

google/filament#10537 · opened

on Oct 7, 2026

1

ktxreader: off-grid KTX2 dimensions select an unusable block-compressed format

google/filament#10532 · opened

on Oct 5, 2026

1

Heap OOB write in workaroundSpecConstant via unchecked SPIR-V wordCount (.filamat)

google/filament#10525 · opened

on Oct 2, 2026

Heap buffer overflow via integer overflow in BasisU transcoder total_blocks (KTX2)

google/filament#10523 · opened

on Oct 2, 2026

Heap out-of-bounds read/write in SurfaceOrientation via unvalidated triangle indices (NDEBUG-only, reachable from untrusted glTF) — unpatched 90+ days after GHSA-x24w-mhq6-m5vf

google/filament#10521 · opened

on Oct 2, 2026

Integer overflow in gltfio DracoCache.cpp and AssetLoader.cpp leads to heap buffer overflow

google/filament#10495 · opened

on Sep 29, 2026

Swapchain resize doesn't work in Wayland

google/filament#10449 · opened

on Sep 19, 2026

MeshAssimp: glTF texture URI is joined without a containment check, allowing path traversal outside the model directory

google/filament#10431 · opened

on Sep 16, 2026

gltfio: Animator never clamps morph-weight counts to the 256-target limit — spec-conforming GLB with >256 morph targets and a weights channel aborts in setMorphWeights

google/filament#10409 · opened

on Sep 11, 2026

[Metal] Descriptor set layout bindings out-of-bounds access and unsorted bindings invariant violation

google/filament#10406 · opened

on Sep 10, 2026

Add support for multiple Dear ImGui viewports to filagui

google/filament#10393 · opened

on Sep 8, 2026

Implement the missing async functions of WebGPUDriver

google/filament#10374 · opened

on Sep 1, 2026

2

tvOS support (appletvos + appletvsimulator)

google/filament#10339 · opened

on Aug 20, 2026

lit shading model produces black faces on Metal (NaN propagation from half-precision NoV)

google/filament#10280 · opened

on Aug 9, 2026

3

get-commit-msg: head_commit.author.name/email are interpolated into the run: block while the sibling commit message is env-guarded

google/filament#10279 · opened

on Aug 8, 2026

1

beamsplitter deletes hand-written declarations that AGENTS.md tells agents to regenerate

google/filament#10271 · opened

on Aug 6, 2026

android: expose RenderableManager.PrimitiveType value

google/filament#10263 · opened

on Aug 4, 2026

3

gltfio: UvMap out-of-bounds access in constrainMaterial and processShaderString via unclamped glTF texCoord index

google/filament#10202 · opened

on Jul 13, 2026

1

gltfio: heap OOB write in cgltf_accessor_unpack_floats via meshopt-bypassed sparse accessor index

google/filament#10201 · opened

on Jul 12, 2026

1

filameshio: heap OOB write in MeshReader compressed vertex path when UV1 absent but sizes.uv1 non-zero

google/filament#10200 · opened

on Jul 12, 2026

1

gltfio: heap OOB read in updateBoneMatrices() - asset->mSkins desync when createSkins() skips validation failures

google/filament#10198 · opened

on Jul 11, 2026

1

gltfio: heap OOB read in uploadBuffers() - accessor count vs morphTargetCount mismatch

google/filament#10197 · opened

on Jul 11, 2026

3

gltfio: heap out-of-bounds write in `TangentsJob` via unvalidated `MAT4`-typed morph normal/tangent accessor (type confusion)

google/filament#10194 · opened

on Jul 10, 2026

2

gltfio: EXT_meshopt_compression indices bypass cgltf validation → OOB index read

google/filament#10193 · opened

on Jul 10, 2026

Navigation Menu

Repository navigation

Issues

webgpu: compressed textures receive invalid RenderAttachment usage

compressed texture support ignores enabled device features

ktxreader: off-grid KTX2 dimensions select an unusable block-compressed format

Heap OOB write in workaroundSpecConstant via unchecked SPIR-V wordCount (.filamat)

Heap buffer overflow via integer overflow in BasisU transcoder total_blocks (KTX2)

Heap out-of-bounds read/write in SurfaceOrientation via unvalidated triangle indices (NDEBUG-only, reachable from untrusted glTF) — unpatched 90+ days after GHSA-x24w-mhq6-m5vf

Integer overflow in gltfio DracoCache.cpp and AssetLoader.cpp leads to heap buffer overflow

Swapchain resize doesn't work in Wayland

MeshAssimp: glTF texture URI is joined without a containment check, allowing path traversal outside the model directory

gltfio: Animator never clamps morph-weight counts to the 256-target limit — spec-conforming GLB with >256 morph targets and a weights channel aborts in setMorphWeights

[Metal] Descriptor set layout bindings out-of-bounds access and unsorted bindings invariant violation

Add support for multiple Dear ImGui viewports to filagui

Implement the missing async functions of WebGPUDriver

tvOS support (appletvos + appletvsimulator)

lit shading model produces black faces on Metal (NaN propagation from half-precision NoV)

get-commit-msg: head_commit.author.name/email are interpolated into the run: block while the sibling commit message is env-guarded

beamsplitter deletes hand-written declarations that AGENTS.md tells agents to regenerate

android: expose RenderableManager.PrimitiveType value

gltfio: UvMap out-of-bounds access in constrainMaterial and processShaderString via unclamped glTF texCoord index

gltfio: heap OOB write in cgltf_accessor_unpack_floats via meshopt-bypassed sparse accessor index

filameshio: heap OOB write in MeshReader compressed vertex path when UV1 absent but sizes.uv1 non-zero

gltfio: heap OOB read in updateBoneMatrices() - asset->mSkins desync when createSkins() skips validation failures

gltfio: heap OOB read in uploadBuffers() - accessor count vs morphTargetCount mismatch

gltfio: heap out-of-bounds write in `TangentsJob` via unvalidated `MAT4`-typed morph normal/tangent accessor (type confusion)

gltfio: EXT_meshopt_compression indices bypass cgltf validation → OOB index read