46 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-19999
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function...
DEBIAN-CVE-2026-19969
A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads...
UBUNTU-CVE-2026-19969
A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads...
CVE-2026-19970
A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bonesnum results in heap-based buffer...
EUVD-2026-60017
A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads...
CVE-2026-19969
A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads...
CVE-2026-19969
The vulnerability CVE-2026-19969 affects Open Asset Import Library Assimp (versioning implied by 17c12da) specifically the 3DGS MDL7 Model Output Mesh Generator. The flaw is in Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7 within code/AssetLib/MDL/MDLLoader.cpp and manifests as a buffer ove...
CVE-2026-19970: Heap-based Buffer Overflow
A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bonesnum results in heap-based buffer...
CVE-2026-19999: Buffer Copy without Checking Size of Input
A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ParseBoneTrafoKeys3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Bone Transformation Key Parser. The manipulati...
CVE-2026-19968: Heap-based Buffer Overflow
A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces3DGSMDL7 in the library code/AssetLib/LWO/LWOLoader.h of the component 3DGS MDL7 Model Parser. Executing a manipulation can lead to heap-based buffer...
Linux Distros Unpatched Vulnerability : CVE-2026-19969
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function...
PT-2026-38496
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFile Quake1 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. It is possible to launch the atta...
PT-2026-38500
A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::ParseSkinLump 3DGS MDL7 of the file assimp/code/AssetLib/MDL/MDLMaterialLoader.cpp. The manipulation leads to out-of-bounds read. Attacking locally is a...
assimp:assimp_fuzzer: Use-of-uninitialized-value in Assimp::MDLImporter::ReplaceTextureWithColor
Detailed Report: https://oss-fuzz.com/testcase?key=4877139169312768 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Assimp::MDLImporter::ReplaceTextureWithColor...
assimp:assimp_fuzzer: Crash in Assimp::MDLImporter::ProcessFrames_3DGS_MDL7
Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6077223328350208 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x58c4b71f6002 Crash Stat...
assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MDLImporter::SkipSkinLump_3DGS_MDL7
Detailed Report: https://oss-fuzz.com/testcase?key=4734098021351424 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x512000000bcb Crash State:...
assimp:assimp_fuzzer: Crash in Assimp::MDLImporter::ImportUVCoordinate_3DGS_MDL345
Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6249728158531584 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5b3c3725c860 Crash Stat...
EUVD-2025-16280
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-5168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function...
Out-of-Bounds-Read
libassimp.so is vulnerable to an out-of-bounds read. The vulnerability is due to insufficient bounds checking in the MDLImporter::ParseSkinLump3DGSMDL7 function when parsing 3DGS MDL7 skin lumps, allowing a local attacker to read unintended memory...