OESA-2026-2962 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was found in Open...

openSUSE 16 Security Update : assimp (openSUSE-SU-2026:21242-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21242-1 advisory. This update for assimp fixes the following issues - CVE-2025-11277: large mWidth and mHeight dimensions can lead to integer overflow and a...

assimp:assimp_roundtrip_fuzzer: Heap-buffer-overflow in Assimp::X3DExporter::CheckAndExport_Light

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4544196682514432 Project: assimp Fuzzing Engine: afl Fuzz Target: assimproundtripfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x78313a7e25b8...

Medium: qt5-qt3d

Issue Overview: A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF2Importer::ImportEmbeddedTextures in the library code/AssetLib/glTF2/glTF2Importer.cpp of the component TF File Handler. The manipulation results in null pointer dereference. The attack is only possib...

Amazon Linux 2 : qt5-qt3d, --advisory ALAS2-2026-3797 (ALAS-2026-3797)

The version of qt5-qt3d installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3797 advisory. A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF2Importer::ImportEmbeddedTextures in th...

Security update for assimp (important)

openSUSE security update: security update for assimp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21242-1 Rating: important References: bsc1251019 bsc1266996 bsc1266998 bsc1266999 bsc1267037 Cross-References: CVE-2025-11277 CVE-2026-10197...

SUSE CVE-2026-14604

A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the function Assimp::Exporter::ExportToBlob of the file code/AssetLib/Ply/PlyLoader.cpp of the component PLY Model Handler. This manipulation causes double free. The attack can be initiated remotely. The...

OSV-2026-1041 Heap-buffer-overflow in Assimp::ObjExporter::indexMap<Assimp::ObjExporter::vertexData, Assimp::ObjExport

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531365119 Crash type: Heap-buffer-overflow WRITE 12 Crash state: Assimp::ObjExporter::indexMapAssimp::ObjExporter::vertexData, Assimp::ObjExport Assimp::ObjExporter::WriteGeometryFile Assimp::ObjExporter::ObjExporter...

PT-2026-106837

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531365119 Crash type: Heap-buffer-overflow WRITE 12 Crash state: Assimp::ObjExporter::indexMapAssimp::ObjExporter::vertexData, Assimp::ObjExport Assimp::ObjExporter::WriteGeometryFile Assimp::ObjExporter::ObjExporter...

OSV-2026-1035 Heap-buffer-overflow in Assimp::D3MF::D3MFExporter::writeFaces

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531123003 Crash type: Heap-buffer-overflow READ 4 Crash state: Assimp::D3MF::D3MFExporter::writeFaces Assimp::D3MF::D3MFExporter::writeMesh Assimp::D3MF::D3MFExporter::writeObjects...

OSV-2026-1032 Use-of-uninitialized-value in Assimp::PbrtExporter::WriteTextures

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531040219 Crash type: Use-of-uninitialized-value Crash state: Assimp::PbrtExporter::WriteTextures Assimp::PbrtExporter::WriteWorldDefinition Assimp::PbrtExporter::PbrtExporter...

OSV-2026-1030 Use-of-uninitialized-value in Assimp::glTFExporter::GetTexSampler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531097475 Crash type: Use-of-uninitialized-value Crash state: Assimp::glTFExporter::GetTexSampler Assimp::glTFExporter::GetMatColorOrTex Assimp::glTFExporter::ExportMaterials...

PT-2026-105764

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531123003 Crash type: Heap-buffer-overflow READ 4 Crash state: Assimp::D3MF::D3MFExporter::writeFaces Assimp::D3MF::D3MFExporter::writeMesh Assimp::D3MF::D3MFExporter::writeObjects...

PT-2026-105763

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531040219 Crash type: Use-of-uninitialized-value Crash state: Assimp::PbrtExporter::WriteTextures Assimp::PbrtExporter::WriteWorldDefinition Assimp::PbrtExporter::PbrtExporter...

PT-2026-105762

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531097475 Crash type: Use-of-uninitialized-value Crash state: Assimp::glTFExporter::GetTexSampler Assimp::glTFExporter::GetMatColorOrTex Assimp::glTFExporter::ExportMaterials...

assimp:assimp_roundtrip_fuzzer: Heap-buffer-overflow in Assimp::ObjExporter::indexMap<Assimp::ObjExporter::vertexData, Assimp::ObjExport

Detailed Report: https://oss-fuzz.com/testcase?key=5728125858938880 Project: assimp Fuzzing Engine: afl Fuzz Target: assimproundtripfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 12 Crash Address: 0x7bc14dce6550 Crash State:...

assimp:assimp_fuzzer: Crash in Assimp::MDL::HalfLife::HL1MDLLoader::read_animations

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4786852619157504 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x724000040001 Crash State...

Linux Distros Unpatched Vulnerability : CVE-2026-14610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::InternReadFile of the file...

assimp:assimp_roundtrip_fuzzer: Heap-buffer-overflow in Assimp::D3MF::D3MFExporter::writeFaces

Detailed Report: https://oss-fuzz.com/testcase?key=5916417795620864 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimproundtripfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x78382b112a34 Crash State:...

assimp:assimp_roundtrip_fuzzer: Use-of-uninitialized-value in Assimp::PbrtExporter::WriteTextures

Detailed Report: https://oss-fuzz.com/testcase?key=4711195983282176 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimproundtripfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Assimp::PbrtExporter::WriteTextures...