CVE-2026-19969: fallo de gravedad media en Open Asset Import Library Assimp
Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow
Publicada el · Actualizada el
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.3epss 0.5%
probabilidad de explotación
0.5%top 59% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
Open Asset Import Library · AssimpPoCs públicas encontradas — 1
cve_referencegithub.com/user-attachments/files/27425495/poc.zipno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Open Asset Import Library Assimp
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-2751MEDIUMOpen Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-boundsEPSS 0.8%CVE-2025-2592MEDIUMOpen Asset Import Library Assimp CSMLoader.cpp InternReadFile heap-based overflowEPSS 0.7%CVE-2025-2752MEDIUMOpen Asset Import Library Assimp CSM File fast_atof.h fast_atoreal_move out-of-boundsEPSS 0.7%CVE-2025-2591MEDIUMOpen Asset Import Library Assimp MDLLoader.cpp InternReadFile_Quake1 divide by zeroEPSS 0.6%CVE-2025-3016MEDIUMOpen Asset Import Library Assimp MDL File MDLMaterialLoader.cpp ParseTextureColorData resource consumptionEPSS 0.6%CVE-2025-2756MEDIUMOpen Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflowEPSS 0.6%