A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. Defenders responsible for Open Asset Import Library Assimp installations, particularly those using versions up to [truncated]
MEDIUMOpen Asset Import LibraryCVE published 2026-08-30
The CVE-2026-82591 vulnerability is a heap-based buffer overflow in the Open Asset Import Library Assimp up to version 6.0.2. The vulnerability is located in the MD5Importer::MakeDataUnique function of the MD5Loader.cpp file. The attack can only be performed from a local environment, and the CVSS score is 4.8 with a medium severity. Developers and administrators using Open Asset Import Library Assimp up t [truncated]
LOWOpen Asset Import LibraryCVE published 2026-07-01
A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. The vulnerability affects the function Assimp::SceneCombiner::Copy in the file code/Common/SceneCombiner.cpp of the component Model File Handler. Manipulation of the argument width/height leads to a heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used.
LOWOpen Asset Import LibraryCVE published 2026-06-01
A heap-based buffer overflow vulnerability exists in the Open Asset Import Library (Assimp) up to version 6.0.4, specifically within the Half-Life 1 MDL Loader component. The flaw resides in the `Assimp::MDL::HalfLife::HL1MDLLoader::read_animations` function of `HL1MDLLoader.cpp`. Successful exploitation requires local access and low privileges, with no user interaction needed. The vulnerability has been [truncated]
