CVE-2026-117608

Versions of Assimp through 6.0.5 are vulnerable to a heap out-of-bounds read caused by an integer overflow in MD2Importer::ValidateHeader(). An attacker can provide a malicious .md2 file with crafted numFrames and numVertices values that wrap the 32-bit size check, bypassing frame table bounds ch...

CVE-2026-117608 Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflow

Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader that allows attackers to bypass frame table bounds checks using crafted header fields. Attackers can supply a malicious .md2 file whose numFrames and numVertices values wrap the 32-bit size check, causi...

EUVD-2026-111543

Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader that allows attackers to bypass frame table bounds checks using crafted header fields. Attackers can supply a malicious .md2 file whose numFrames and numVertices values wrap the 32-bit size check, causi...