CVE-2026-129480

The Assimp library versions through 6.0.6 are vulnerable to a heap out-of-bounds read in the MD2Importer::InternReadFile function. The root cause is an unvalidated stored frameSize header field within the .md2 file format. An attacker can provide a specially crafted .md2 file with a non-zero keyf...

CVE-2026-117608

A flaw was found in assimp. An attacker can exploit an integer overflow in the MD2 file parser by providing a specially crafted 3D model file with manipulated header values. When processed, this vulnerability triggers an out-of-bounds memory read, resulting in a Denial of Service DoS through an...

OESA-2025-2178 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability has been found in Op...