CVE-2026-19970

creationtimestamp| type| source ---|---|--- 2026-08-17 03:09:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2fm7hixsdebgh 2026-08-17 19:32:51+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtcgya5cl32q...

CVE-2026-19970

A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bonesnum results in heap-based buffer...

CVE-2026-19970

CVE-2026-19970 involves Open Asset Import Library Assimp (version 17c12da) with a heap-based buffer overflow in MDLLoader.cpp, function AddBonesToNodeGraph_3DGS_MDL7 of the Node Parser. The vulnerability stems from manipulation of the bones_num argument, enabling a remote exploit. The exploit is ...