Notices by Inochi2D (inochi2d@vt.social)

Recently there was an announcement that Live2D's moc3 file format has a pretty severe security flaw[1], letting you all know that Inochi2D is not vulnerable to the exploit as it does not load moc3 files and INX and INP files are bounds checked.

We take security seriously and ask researchers to send us an encrypted email to security@inochi2d.com in case a problem is found. PGP Key can be found here https://pastebin.com/07UBaQpY! 🦊✉️

1: https://undeleted.ronsor.com/live2d-a-security-trainwreck/