CVE-2026-10200

Assimp up to 6.0.4 contains a heap-based buffer overflow in glTFCommon::CopyValue (glTFCommon.h) within the 4x4 Matrix Parser. The vulnerability is triggered by a local-position manipulation and affects the affected library/component. The exploit has been made public, with a proof-of-concept publ...