CVE-2026-108573

A flaw was found in assimp. A remote attacker could exploit this vulnerability by providing a specially crafted Polygon File Format PLY file, triggering an out-of-bounds read in the buffer parsing mechanism. This issue can cause an application crash, resulting in a Denial of Service DoS, or...

Linux Distros Unpatched Vulnerability : CVE-2026-108573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the...

DEBIAN-CVE-2026-108573

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2026-108573

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2026-108573

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

EUVD-2026-96883

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2026-108573 Open Asset Import Library Assimp PLY File getNextBlock out-of-bounds

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2026-108573

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2026-108573

A vulnerability exists in the Open Asset Import Library Assimp (versions up to 6.0.5 ). Specifically, the PLY File Handler component contains a flaw in the IOStreamBuffer::getNextBlock function. An attacker can perform manipulations resulting in an out-of-bounds read , which can be initiated remo...

CVE-2026-108573

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

CVE-2026-108573: Out-of-bounds Read

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

PT-2026-110105

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

ply_exploit_rejection

Ply 3.11 Exploit Rejection This project argues that CVE‑2025‑56005 be rejected. Argument 1: The Proof of Concept does not complete sucessfully In this project the code from the proof of concept has been copied to main.py. Run the proof of concept To run the exploit ensure that you have installed ...

Rocky Linux 8.6 [CIQ] Security Update: python38-ply Multiple Vulnerabilities (ciqsa-2026_0211)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260211 advisory. This advisory aggregates security fixes for the python-ply SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8.8 [CIQ] Security Update: python39-ply (ciqsa-2026_1148)

The Rocky Linux 8.8 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261148 advisory. This advisory aggregates security fixes for the python-ply SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the preceding description...

Rocky Linux 8.6 [CIQ] Security Update: python39-ply (ciqsa-2026_0234)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260234 advisory. This advisory aggregates security fixes for the python-ply SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-28861. Tenable has extracted the preceding descriptio...

Rocky Linux 8.6 [CIQ] Security Update: python39-ply Multiple Vulnerabilities (ciqsa-2026_0770)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260770 advisory. This advisory aggregates security fixes for the python-ply SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Exploit for Deserialization of Untrusted Data in Dabeaz Ply

CVE-2025-56005 exploitability lab A self-contained, isolated...

EulerOS Virtualization 2.11.1 : python-ply (EulerOS-SA-2026-3465)

According to the versions of the python-ply packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile...

EulerOS Virtualization 2.11.0 : python-ply (EulerOS-SA-2026-3552)

According to the versions of the python-ply packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile...