PT-2026-36521

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488752792 Crash type: UNKNOWN READ Crash state: void Assimp::Blender::ConvertDispatcher void Assimp::Blender::Structure::ReadFieldArray void Assimp::Blender::Structure::Convert...

assimp:assimp_fuzzer: Crash in void Assimp::Blender::ConvertDispatcher<float>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6476729425395712 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ba2a1100bc8 Crash State: void...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MDLImporter::SkipSkinLump_3DGS_MDL7

Detailed Report: https://oss-fuzz.com/testcase?key=4734098021351424 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x512000000bcb Crash State:...

assimp:assimp_fuzzer_glb: Heap-buffer-overflow in aiColor4t<float>* GetVertexColorsForType<unsigned short>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6295007387779072 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzerglb Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

assimp:assimp_fuzzer: Use-of-uninitialized-value in Assimp::ValidateDSProcess::Validate

Detailed Report: https://oss-fuzz.com/testcase?key=5484847706734592 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Assimp::ValidateDSProcess::Validate...

assimp:assimp_fuzzer: Use-of-uninitialized-value in Assimp::AMFImporter::Postprocess_BuildMeshSet

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5236639130779648 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

assimp:assimp_fuzzer: Crash in aiMesh::~aiMesh

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5073201599414272 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fba4d7bc020 Crash State...

OESA-2026-1385 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability, which was classifie...

OESA-2026-1384 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was found in Open...

SUSE CVE-2025-5167

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function LWOImporter::GetS0 in the library assimp/code/AssetLib/LWO/LWOLoader.h. The manipulation of the argument out leads to out-of-bounds read. The...

assimp:assimp_fuzzer: Container-overflow in ODDLParser::OpenDDLParser::parseDataArrayList

Detailed Report: https://oss-fuzz.com/testcase?key=6555395115253760 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x7ce6384e0861 Crash State:...

assimp:assimp_fuzzer_glb: Heap-buffer-overflow in Assimp::glTF2Importer::ImportNode

Detailed Report: https://oss-fuzz.com/testcase?key=6480755831406592 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzerglb Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7b60fbbe1740 Crash State: Assimp::glTF2Importer::ImportNode...

assimp:assimp_fuzzer_gltf: Heap-buffer-overflow in unsigned long glTF2::Accessor::ExtractData<aiQuaterniont<float>>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5384209475895296 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzergltf Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

assimp:assimp_fuzzer_collada: Use-of-uninitialized-value in Assimp::GeometryUtils::calculateAreaOfTriangle

Detailed Report: https://oss-fuzz.com/testcase?key=5333441754497024 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzercollada Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2026-229 Segv on unknown address in aiAnimation::~aiAnimation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=483188619 Crash type: Segv on unknown address Crash state: aiAnimation::aiAnimation aiScene::aiScene Assimp::BaseImporter::ReadFile...

PT-2026-21776

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=483188619 Crash type: Segv on unknown address Crash state: aiAnimation::aiAnimation aiScene::aiScene Assimp::BaseImporter::ReadFile...

OPENSUSE-SU-2026:10174-1 assimp-devel-6.0.4-1.1 on GA media

These are all security issues fixed in the assimp-devel-6.0.4-1.1 package on the GA media of openSUSE Tumbleweed...

assimp:assimp_fuzzer_gltf: Heap-buffer-overflow in unsigned long glTF2::Accessor::ExtractData<aiVector3t<float>>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4916291875176448 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzergltf Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

assimp:assimp_fuzzer_glb: Use-of-uninitialized-value in std::__1::__unordered_map_equal<Assimp::Vertex, std::__1::pair<Assimp::Vertex co

Detailed Report: https://oss-fuzz.com/testcase?key=6403453281959936 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzerglb Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::unorderedmapequalAssimp::Vertex,...

assimp:assimp_fuzzer_fbx: Container-overflow in Assimp::FBX::FBXConverter::ConvertMeshMultiMaterial

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6379452920823808 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzerfbx Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address:...