CVE-2026-19967
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A security flaw has been discovered in Open Asset Import Library Assimp 17c12da in the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the File Parser component. Manipulation results in a heap-based buffer overflow. The attack can be initiated remotely, and the exploit has been released publicly.
Risk Assessment
The risk includes potential remote code execution or application crash, which could lead to confidentiality or availability breaches.
Recommendation
It is recommended to monitor vendor patches and apply updates as soon as available, as the project has not responded to the report.
Original NVD description (English source)
A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.