7 matches found
CVE-2026-111128
Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...
CVE-2026-111129
The Open Asset Import Library (assimp) through version 6.0.5 is vulnerable to a NULL pointer dereference within the Ogre3D binary mesh importer. Specifically, the OgreBinarySerializer::ReadAnimationKeyFrames() function fails to properly validate animation track targets. An attacker can provide a ...
CVE-2026-111129 Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track
Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...
EUVD-2026-102360
Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...
CVE-2026-111128 Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment
Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...
CVE-2026-111128
The Assimp library, in versions through 6.0.5 , is vulnerable to a NULL pointer dereference within the Ogre3D importer . The flaw exists in OgreStructs.cpp, where the application fails to validate bone indices. An attacker can trigger a crash of the host process by providing a crafted .mesh and ....
EUVD-2026-102359
Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...