{"id":"CVE-2026-10198","state":"PUBLISHED","title":"Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference","description":"A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is the function Assimp::glTFImporter::ImportMeshes of the file glTFImporter.cpp of the component glTFImporter. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been published and may be used. The project tagged the reported issue as bug.","publishedAt":"2026-05-31T22:15:12.239Z","updatedAt":"2026-06-01T14:59:43.156Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["n/a Assimp"],"affected":[{"vendor":"n/a","product":"Assimp","versions":[{"version":"6.0.0","status":"affected"},{"version":"6.0.1","status":"affected"},{"version":"6.0.2","status":"affected"},{"version":"6.0.3","status":"affected"},{"version":"6.0.4","status":"affected"}],"cpes":["cpe:2.3:a:assimp:assimp:*:*:*:*:*:*:*:*"],"modules":["glTFImporter"]}],"references":["https://vuldb.com/vuln/367478","https://vuldb.com/vuln/367478/cti","https://vuldb.com/cve/CVE-2026-10198","https://vuldb.com/submit/821178","https://github.com/assimp/assimp/issues/6609","https://github.com/user-attachments/files/27193865/poc.zip","https://github.com/assimp/assimp/"],"weaknesses":["CWE-476","CWE-404"],"ingestedAt":"2026-10-29T20:10:33.477Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/10xxx/CVE-2026-10198.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-10198","state":"PUBLISHED","datePublished":"2026-05-31T22:15:12.239Z","dateUpdated":"2026-06-01T14:59:43.156Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-05-31T06:13:37.737Z"},"containers":{"cna":{"title":"Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference","descriptions":[{"lang":"en","value":"A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is the function Assimp::glTFImporter::ImportMeshes of the file glTFImporter.cpp of the component glTFImporter. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been published and may be used. The project tagged the reported issue as bug."}],"affected":[{"vendor":"n/a","product":"Assimp","versions":[{"version":"6.0.0","status":"affected"},{"version":"6.0.1","status":"affected"},{"version":"6.0.2","status":"affected"},{"version":"6.0.3","status":"affected"},{"version":"6.0.4","status":"affected"}],"cpes":["cpe:2.3:a:assimp:assimp:*:*:*:*:*:*:*:*"],"modules":["glTFImporter"]}],"references":[{"url":"https://vuldb.com/vuln/367478","name":"VDB-367478 | Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/367478/cti","name":"VDB-367478 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-10198","name":"CVE-2026-10198 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/821178","name":"Submit #821178 | Assimp commit 17c12da NULL Pointer Dereference","tags":["third-party-advisory"]},{"url":"https://github.com/assimp/assimp/issues/6609","tags":["issue-tracking"]},{"url":"https://github.com/user-attachments/files/27193865/poc.zip","tags":["exploit"]},{"url":"https://github.com/assimp/assimp/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":3.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV3_0":{"version":"3.0","baseScore":3.3,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV2_0":{"version":"2.0","baseScore":1.7,"vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","type":"CWE","lang":"en","description":"NULL Pointer Dereference"}]},{"descriptions":[{"cweId":"CWE-404","type":"CWE","lang":"en","description":"Denial of Service"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-05-31T22:15:12.239Z"},"timeline":[{"time":"2026-05-31T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-05-31T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-05-31T08:18:53.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"TYGLS (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-01T14:59:32.572454Z","id":"CVE-2026-10198","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-01T14:59:43.156Z"}}]}}}