Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-14610

Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile heap-based overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. Patch name: eb84eec580d3f4ba2f0fd87409b7d0744620f11e. Applying a patch is the recommended action to fix this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open Asset Import Library Assimp

  • 6.0.0affected
  • 6.0.1affected
  • 6.0.2affected
  • 6.0.3affected
  • 6.0.4affected
  • 6.0.5affected

References