Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

59 records

Priority LOW 29

Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() that allows attackers to bypass frame table bounds checks using crafted header fields.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00135 Published 2026-10-28 Fix deferred CWE-190
Priority MEDIUM 63

Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames() handling of unvalidated animation tra…

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00128 Published 2026-10-15 Fix deferred CWE-476
Priority MEDIUM 63

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00195 Published 2026-10-15 Fix deferred CWE-476
TI-2026-70561 CVE-2026-108573 · GHSA-7v6v-f62m-6jgf

Out-of-bounds read in Assimp PLY file handler

Priority LOW 22

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00169 Published 2026-10-11 Fix deferred CWE-119
Priority MEDIUM 57

A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.005 Published 2026-08-17 Fix deferred CWE-119
Load more