CVE-2026-10200 Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow

A vulnerability was found in Assimp up to 6.0.4. This affects the function glTFCommon::CopyValue in the library glTFCommon.h of the component 4x4 Matrix Parser. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has bee...

CVE-2026-10200

A vulnerability was found in Assimp up to 6.0.4. This affects the function glTFCommon::CopyValue in the library glTFCommon.h of the component 4x4 Matrix Parser. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has bee...

CVE-2026-10199

A vulnerability has been found in Assimp up to 6.0.4. Affected by this issue is the function glTF2::LazyDict in the library glTF2Asset.h. Such manipulation of the argument operator leads to null pointer dereference. The attack must be carried out locally. The exploit has been disclosed to the...

CVE-2026-10199

CVE-2026-10199 affects Assimp up to 6.0.4 in glTF2Asset.h: the glTF2::LazyDict function exposed by operator[] manipulation can cause a null pointer dereference. The issue is exploitable locally, with a proof-of-concept in the public domain. A patch is available (patch hash d24b85319bd70c65883a2b9...

CVE-2026-10199 Assimp glTF2Asset.h LazyDict null pointer dereference

A vulnerability has been found in Assimp up to 6.0.4. Affected by this issue is the function glTF2::LazyDict in the library glTF2Asset.h. Such manipulation of the argument operator leads to null pointer dereference. The attack must be carried out locally. The exploit has been disclosed to the...

CVE-2026-10197

A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF2Importer::ImportEmbeddedTextures in the library code/AssetLib/glTF2/glTF2Importer.cpp of the component TF File Handler. The manipulation results in null pointer dereference. The attack is only possible with local...

PT-2026-45218

A vulnerability was determined in Assimp up to 6.0.4. This vulnerability affects the function FBXExporter::WriteObjects of the file FBXExporter.cpp of the component UV Channel Handler. Executing a manipulation can lead to divide by zero. The attack needs to be launched locally. The exploit has be...

PT-2026-45215

Name of the Vulnerable Software and Affected Versions Assimp versions prior to 6.0.5 Description A null pointer dereference occurs in the glTFImporter component within the Assimp::glTFImporter::ImportMeshes function of the glTFImporter.cpp file. This issue allows for local execution attacks...

PT-2026-45217

Name of the Vulnerable Software and Affected Versions Assimp versions prior to 6.0.5 Description A heap-based buffer overflow exists in the 4x4 Matrix Parser component within the glTFCommon.h library. This issue occurs in the glTFCommon::CopyValue function and can be triggered by a local attacker...

PT-2026-45214

Name of the Vulnerable Software and Affected Versions Assimp versions prior to 6.0.5 Description A null pointer dereference occurs in the TF File Handler component within the glTF2Importer::ImportEmbeddedTextures function located in the code/AssetLib/glTF2/glTF2Importer.cpp library file. This iss...

Linux Distros Unpatched Vulnerability : CVE-2025-70070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry CVE-2025-70070 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2025-70071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray CVE-2025-70071 Note that Nessus...

CVE-2025-70070

A flaw was found in Assimp. A remote attacker can exploit this vulnerability by manipulating the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry function, leading to a denial of service DoS. This can make the affected system or application unavailable to legitimate users...

CVE-2025-70071

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray...

CVE-2025-70069

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial method...

CVE-2025-70070

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry...

CVE-2025-70071

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray...

Assimp 代码问题漏洞

Assimp is an open-source library developed by Assimp. It is used for importing and exporting various 3D model formats. Version 6.0.2 of Assimp contains a code vulnerability; this vulnerability originates from the MeshGeometry::MeshGeometry method in FBXMeshGeometry.cpp, which may allow a remote...

CVE-2025-70071

CVE-2025-70071 affects Assimp v6.0.2 with a DoS via FBXParser.cpp::ParseVectorDataArray(). The Amazon Linux 2 advisory ALAS-2026-3335 lists this alongside other CVEs (70067/70069/70070/70072) and provides an updated qt5-qt3d package (5.15.3-1) as a fix. Affected component: Assimp 6.0.2, vulnerabl...

PT-2026-36810

Name of the Vulnerable Software and Affected Versions Assimp version 6.0.2 Description An issue in the FBXConverter::ConvertMeshMultiMaterial function within the FBXConverter.cpp component allows a remote attacker to cause a denial of service. Recommendations At the moment, there is no informatio...