Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1553 matches found

RedhatCVE
RedhatCVE•added 2026/10/16 9:47 a.m.•16 views

CVE-2026-111129

A flaw was found in assimp. An attacker can exploit this flaw by convincing a user or automated system to process a specially crafted 3D mesh file containing invalid animation track targets. Parsing this file triggers an unhandled memory access error null pointer dereference in the Ogre mesh...

6.8CVSS5.7AI score0.0013EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE•added 2026/10/16 9:47 a.m.•15 views

CVE-2026-111128

A flaw was found in Assimp. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the host application. The issue occurs within the Ogre3D importer, which fails to properly validate bone indices when parsing 3D model files. By supplying a specially crafted mesh or...

6.8CVSS5.5AI score0.00198EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu•added 2026/10/16 12:00 a.m.•5 views

UBUNTU-CVE-2026-111128

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

6.8CVSS5.5AI score0.00198EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus•added 2026/10/16 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2026-111128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone...

6.8CVSS5.4AI score0.00198EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus•added 2026/10/16 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-111129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's...

6.8CVSS5.6AI score0.0013EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu•added 2026/10/16 12:00 a.m.•5 views

UBUNTU-CVE-2026-111129

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...

6.8CVSS5.6AI score0.0013EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve•added 2026/10/16 12:00 a.m.•7 views

CVE-2026-111129

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...

6.8CVSS5.8AI score0.0013EPSS
SaveExploits0References6
osv_debian
osv_debian•added 2026/10/15 7:17 p.m.•15 views

DEBIAN-CVE-2026-111128

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

6.8CVSS5.5AI score0.00198EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2026/10/15 7:17 p.m.•12 views

DEBIAN-CVE-2026-111129

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...

5.5CVSS5.6AI score0.0013EPSS
SaveExploits0References1
NVD
NVD•added 2026/10/15 7:17 p.m.•7 views

CVE-2026-111128

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

6.8CVSS0.00198EPSS
SaveExploits0References5
NVD
NVD•added 2026/10/15 7:17 p.m.•8 views

CVE-2026-111129

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...

6.8CVSS0.0013EPSS
SaveExploits0References5
osv_cve
osv_cve•added 2026/10/15 6:57 p.m.•2 views

CVE-2026-111129 Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...

6.8CVSS5.6AI score
SaveExploits0References8
CVE
CVE•added 2026/10/15 6:57 p.m.•14 views

CVE-2026-111129

The Open Asset Import Library (assimp) through version 6.0.5 is vulnerable to a NULL pointer dereference within the Ogre3D binary mesh importer. Specifically, the OgreBinarySerializer::ReadAnimationKeyFrames() function fails to properly validate animation track targets. An attacker can provide a ...

6.8CVSS5.6AI score0.0013EPSS
SaveExploits0References5
Debian CVE
Debian CVE•added 2026/10/15 6:57 p.m.•11 views

CVE-2026-111129

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...

6.8CVSS5.6AI score0.0013EPSS
SaveExploits0
EUVD
EUVD•added 2026/10/15 6:57 p.m.•7 views

EUVD-2026-102360

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...

6.8CVSS5.7AI score0.0013EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2026/10/15 6:57 p.m.•33 views

CVE-2026-111129 Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...

6.8CVSS0.0013EPSS
SaveExploits0References5
CVE
CVE•added 2026/10/15 6:57 p.m.•17 views

CVE-2026-111128

The Assimp library, in versions through 6.0.5 , is vulnerable to a NULL pointer dereference within the Ogre3D importer . The flaw exists in OgreStructs.cpp, where the application fails to validate bone indices. An attacker can trigger a crash of the host process by providing a crafted .mesh and ....

6.8CVSS5.5AI score0.00198EPSS
SaveExploits0References5
EUVD
EUVD•added 2026/10/15 6:57 p.m.•8 views

EUVD-2026-102359

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

6.8CVSS5.5AI score0.00198EPSS
SaveExploits0References5
osv_cve
osv_cve•added 2026/10/15 6:57 p.m.•4 views

CVE-2026-111128 Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

6.8CVSS5.6AI score
SaveExploits0References8
Debian CVE
Debian CVE•added 2026/10/15 6:57 p.m.•12 views

CVE-2026-111128

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

6.8CVSS5.5AI score0.00198EPSS
SaveExploits0
Rows per page
Query Builder