Linux Distros Unpatched Vulnerability : CVE-2026-19999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function...

CVE-2026-19999

A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ParseBoneTrafoKeys3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Bone Transformation Key Parser. The manipulati...

DEBIAN-CVE-2026-19969

A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads...

UBUNTU-CVE-2026-19969

A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads...

CVE-2026-19970

A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bonesnum results in heap-based buffer...

EUVD-2026-60017

A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads...

CVE-2026-19969

The vulnerability CVE-2026-19969 affects Open Asset Import Library Assimp (versioning implied by 17c12da) specifically the 3DGS MDL7 Model Output Mesh Generator. The flaw is in Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7 within code/AssetLib/MDL/MDLLoader.cpp and manifests as a buffer ove...

CVE-2026-19969

A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads...

CVE-2026-19968: Heap-based Buffer Overflow

A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces3DGSMDL7 in the library code/AssetLib/LWO/LWOLoader.h of the component 3DGS MDL7 Model Parser. Executing a manipulation can lead to heap-based buffer...

CVE-2026-19970: Heap-based Buffer Overflow

A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bonesnum results in heap-based buffer...

CVE-2026-19999: Buffer Copy without Checking Size of Input

A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ParseBoneTrafoKeys3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Bone Transformation Key Parser. The manipulati...

Linux Distros Unpatched Vulnerability : CVE-2026-19969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function...

PT-2026-38496

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFile Quake1 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. It is possible to launch the atta...

PT-2026-38500

A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::ParseSkinLump 3DGS MDL7 of the file assimp/code/AssetLib/MDL/MDLMaterialLoader.cpp. The manipulation leads to out-of-bounds read. Attacking locally is a...

assimp:assimp_fuzzer: Use-of-uninitialized-value in Assimp::MDLImporter::ReplaceTextureWithColor

Detailed Report: https://oss-fuzz.com/testcase?key=4877139169312768 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Assimp::MDLImporter::ReplaceTextureWithColor...

assimp:assimp_fuzzer: Crash in Assimp::MDLImporter::ProcessFrames_3DGS_MDL7

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6077223328350208 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x58c4b71f6002 Crash Stat...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MDLImporter::SkipSkinLump_3DGS_MDL7

Detailed Report: https://oss-fuzz.com/testcase?key=4734098021351424 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x512000000bcb Crash State:...

assimp:assimp_fuzzer: Crash in Assimp::MDLImporter::ImportUVCoordinate_3DGS_MDL345

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6249728158531584 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5b3c3725c860 Crash Stat...

EUVD-2025-16280

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-5168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function...