OESA-2026-1969 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was found in Open...

assimp:assimp_fuzzer_collada: Stack-buffer-overflow in Assimp::ColladaLoader::CreateAnimation

Detailed Report: https://oss-fuzz.com/testcase?key=4815251051970560 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzercollada Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x78c321ee0d30 Crash State:...

assimp:assimp_fuzzer_collada: Index-out-of-bounds in Assimp::ColladaParser::ExtractDataObjectFromChannel

Detailed Report: https://oss-fuzz.com/testcase?key=5618648789352448 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzercollada Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

OSV-2026-521 UNKNOWN READ in unsigned long Assimp::StreamReader<true, true>::Get<unsigned long>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499121788 Crash type: UNKNOWN READ Crash state: unsigned long Assimp::StreamReader::Get bool Assimp::Blender::Structure::ResolvePointerstd::1::sharedptr, Assimp::Bl bool Assimp::Blender::Structure::ReadFieldPtr2,...

PT-2026-55563

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499121788 Crash type: UNKNOWN READ Crash state: unsigned long Assimp::StreamReader::Get bool Assimp::Blender::Structure::ResolvePointerstd:: 1::shared ptr, Assimp::Bl bool Assimp::Blender::Structure::ReadFieldPtr2,...

assimp:assimp_fuzzer: Crash in unsigned long Assimp::StreamReader<true, true>::Get<unsigned long>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4846648873517056 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x78a628c42d94 Crash State: unsigned...

OSV-2026-505 UNKNOWN READ in unsigned int Assimp::StreamReader<true, true>::Get<unsigned int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498284131 Crash type: UNKNOWN READ Crash state: unsigned int Assimp::StreamReader::Get void Assimp::Blender::ConvertDispatcher void Assimp::Blender::Structure::ReadField...

PT-2026-36522

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498284131 Crash type: UNKNOWN READ Crash state: unsigned int Assimp::StreamReader::Get void Assimp::Blender::ConvertDispatcher void Assimp::Blender::Structure::ReadField...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::LWOImporter::LoadLWO2File

Detailed Report: https://oss-fuzz.com/testcase?key=5724993966374912 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x746e7aae0b94 Crash State:...

assimp:assimp_fuzzer: Crash in unsigned int Assimp::StreamReader<true, true>::Get<unsigned int>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6341109587705856 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f689b4f0270 Crash State: unsigned i...

assimp:assimp_fuzzer: Use-of-uninitialized-value in Assimp::MDLImporter::ReplaceTextureWithColor

Detailed Report: https://oss-fuzz.com/testcase?key=4877139169312768 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Assimp::MDLImporter::ReplaceTextureWithColor...

OESA-2026-1659 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was found in Open...

OESA-2026-1658 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was found in Open...

assimp:assimp_fuzzer: Crash in Assimp::MDLImporter::ProcessFrames_3DGS_MDL7

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6077223328350208 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x58c4b71f6002 Crash Stat...

assimp:assimp_fuzzer_stl: Container-overflow in Assimp::BaseImporter::ConvertToUTF8

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5181294291255296 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzerstl Job Type: aflasanassimp Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address: 0x76907f2e0198 Crash...

Unity Linux 20.1070e Security Update: assimp (UTSA-2026-006188)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006188 advisory. A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::ValidateSurfaceHeader...

Unity Linux 20.1070e Security Update: assimp (UTSA-2026-006186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006186 advisory. A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the librar...

Amazon Linux 2 : qt5-qt3d, --advisory ALAS2-2026-3187 (ALAS-2026-3187)

The version of qt5-qt3d installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3187 advisory. A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the functi...

OSV-2026-344 UNKNOWN READ in void Assimp::Blender::ConvertDispatcher<float>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488752792 Crash type: UNKNOWN READ Crash state: void Assimp::Blender::ConvertDispatcher void Assimp::Blender::Structure::ReadFieldArray void Assimp::Blender::Structure::Convert...

PT-2026-36521

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488752792 Crash type: UNKNOWN READ Crash state: void Assimp::Blender::ConvertDispatcher void Assimp::Blender::Structure::ReadFieldArray void Assimp::Blender::Structure::Convert...