assimp-devel-6.0.5-4.1 on GA media (moderate)

assimp-devel-6.0.5-4.1 on GA media Announcement ID: openSUSE-SU-2026:11129-1 Rating: moderate Cross-References: CVE-2026-10200 CVE-2026-10232 CVSS scores: CVE-2026-10200 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2026-10200 SUSE : 1.9...

OPENSUSE-SU-2026:11129-1 assimp-devel-6.0.5-4.1 on GA media

These are all security issues fixed in the assimp-devel-6.0.5-4.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-53334

These are all security issues fixed in the assimp-devel-6.0.5-4.1 package on the GA media of openSUSE Tumbleweed...

assimp:assimp_fuzzer_gltf: Crash in aiMaterial::~aiMaterial

Detailed Report: https://oss-fuzz.com/testcase?key=5484107929550848 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzergltf Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000fffff020 Crash State: aiMaterial::aiMaterial aiScene::aiScene...

assimp:assimp_fuzzer: Use-of-uninitialized-value in Assimp::LWOImporter::CopyFaceIndicesLWO2

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5264547070672896 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2026-933 UNKNOWN READ in aiMesh::~aiMesh

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=524387782 Crash type: UNKNOWN READ Crash state: aiMesh::aiMesh Assimp::ASEImporter::InternReadFile Assimp::BaseImporter::ReadFile...

PT-2026-92184

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=524387782 Crash type: UNKNOWN READ Crash state: aiMesh::aiMesh Assimp::ASEImporter::InternReadFile Assimp::BaseImporter::ReadFile...

assimp:assimp_fuzzer_ase: Crash in aiMesh::~aiMesh

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6403926094839808 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzerase Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffffb Cra...

OESA-2026-2646 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was detected in Assi...

OESA-2026-2647 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was detected in Assi...

PT-2026-48834

Name of the Vulnerable Software and Affected Versions CPM affected versions not specified Description An information disclosure issue exists due to a confused deputy, a scenario where a privileged entity is tricked by a less privileged one into performing an action. This allows for local...

Security update for assimp (moderate)

openSUSE Security Update: Security update for assimp Announcement ID: openSUSE-SU-2026:0045-1 Rating: moderate References: 1241367 Cross-References: CVE-2025-3548 CVSS scores: CVE-2025-3548 SUSE: 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP6 An...

CVE-2026-10229

A flaw was found in Assimp, a library used for importing and exporting various 3D model formats. This vulnerability, a heap-based buffer overflow, exists within the HL1MDLLoader::readmeshes function of the Half-Life 1 MDL Loader component. A local attacker could exploit this by providing speciall...

CVE-2026-10233

A flaw was found in Assimp, within its Half-Life 1 MDL Loader component. A local attacker could exploit an out-of-bounds read vulnerability by manipulating specific input. This could lead to the disclosure of sensitive information. Mitigation Mitigation for this issue is either not available or t...

CVE-2026-10232

A flaw was found in Assimp. This vulnerability, a use-after-free, exists in the aiNode::aiNode function within the ASE File Parser component. A local attacker could exploit this by manipulating specific data, potentially leading to information disclosure, data corruption, or a denial of service...

CVE-2026-10231

A flaw was found in Assimp, a library for importing various 3D model formats. A local attacker could exploit a heap-based buffer overflow vulnerability in the Half-Life 1 MDL Loader component. By manipulating a specific argument, an attacker could cause the application to crash, leading to a deni...

Medium: qt5-qt3d

Issue Overview: Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy without runtime length...

Amazon Linux 2 : qt5-qt3d, --advisory ALAS2-2026-3335 (ALAS-2026-3335)

The version of qt5-qt3d installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3335 advisory. Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in...

OSV-2026-867 Bad-cast to std::__shared_weak_count from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=520147546 Crash type: Bad-cast Crash state: Bad-cast to std::sharedweakcount from invalid vptr std::1::sharedptr::sharedptr Assimp::STEP::ReadFileHeader...

PT-2026-86157

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=520147546 Crash type: Bad-cast Crash state: Bad-cast to std:: shared weak count from invalid vptr std:: 1::shared ptr::shared ptr Assimp::STEP::ReadFileHeader...